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"}) r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000002740)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f0000002780)={0x8001009, 0x4}) r11 = syz_open_dev$media(&(0x7f00000027c0)='/dev/media#\x00', 0x5, 0x10100) setsockopt$inet_tcp_TLS_RX(r11, 0x6, 0x2, &(0x7f0000002800)=@gcm_256={{0x303}, "2810a7fa9eff4a7b", "62433c34aeb1202c4568c847129fa32d1898ab9b172874853bfd5c7016b98498", "bb188c2f", "44fbd4f1e83e00d6"}, 0x38) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000002840)={0x0, 0x1}, &(0x7f0000002880)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000028c0)={r12, 0x1000, "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"}, &(0x7f0000003900)=0x1008) socketpair(0x18, 0x1, 0x8, &(0x7f0000003940)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r13, 0x84, 0x20, &(0x7f0000003980), &(0x7f00000039c0)=0x4) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a40)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(r8, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a80)={0x28, r14, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x2a}}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000001) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000003b40)={0x1000, 0xc, 0x4, 0x2082000, 0x3, {}, {0x3, 0x8, 0x0, 0x59, 0x1, 0x1, "0aa8694a"}, 0x401, 0x2, @offset, 0x3f, 0x0, 0xffffffffffffffff}) fanotify_mark(r15, 0x1, 0x20, r6, &(0x7f0000003bc0)='./file1\x00') r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003c40)='ethtool\x00') accept$packet(r11, &(0x7f0000004040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004080)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000040c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000004100)={'wg0\x00', r3}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000004200)={&(0x7f0000003c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000041c0)={&(0x7f0000004140)={0x6c, r16, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x4008011) [ 591.520659][T16871] ubi: mtd0 is already attached to ubi0 21:05:55 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)) 21:05:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000380)={0x0, 0xfff, 0x0, r4, 0x0, &(0x7f0000000340)={0x990a2c, 0x618, [], @string=&(0x7f0000000300)=0xc4}}) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000000400)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2e97e9bc2c44e15a}, {}, {0xe}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x4c, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c}]}, @TCA_FW_MASK={0x8}]}}]}, 0x78}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200)=[{0x6, 0x0, &(0x7f0000000100), 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/318]}], 0x4924924924924b3, 0x0) [ 591.725611][T16876] ubi: mtd0 is already attached to ubi0 21:05:55 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)) 21:05:55 executing program 0: socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) setsockopt(r0, 0x5, 0x0, &(0x7f0000000180)="a93444c2472f1ce60defa55adab8eda015700bfe908ffdaf67c3a98be785e3a3f56e10d31616dd966a415cf5522b66dedb24e1658f6fa1ec917b2384a2bc0e90777dcef4111352f2e78f501268eb1891fcda27fe2cab331b60331dd71a49d03e75fa31b61e946b442be2ca80c3ed189aa5bea84268bf76e0f999794617b4e3ffffb8e517073b12c4f67c7336ab2f6ef2fc5d30088f10fb632fd3b5e46b14182d4f0f343f6f4803c01886016c6c023b7fa01c5bf6bc5d531e2cdd091b1f93fae6cb4c245c9cc6ce", 0xc7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@can_newroute={0x34, 0x18, 0x601, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0xfffffffffffffff7}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "b6167c7e0e47d0e8"}, 0x1}}]}, 0x34}}, 0x0) [ 592.050209][T16885] ubi: mtd0 is already attached to ubi0 21:05:56 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)) [ 592.267884][T16892] ubi: mtd0 is already attached to ubi0 21:05:56 executing program 0: sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0x0, {0x1, 0x8}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="c9000000ea1b142b90531d3034744c51aa1616e0f5e6a96ed0e2b5c376ece37b2d2a8c91a0aca12a6381a24f4876f6d9c6d6f5f16152449ad17f7260ee4bdd1bc5018000004693a1036f8c1b95300d97d1aec0db11cf54c29c649071243b5af173ede9b54f1a6f95ed708ae5dfeba5c681fcd030d97b90e9d4c4f694f86e23dbda4556fc4c2af54eadc61eb8d57d38c5eecba34a3be396000000000000020094874ed8a05e4ccb9f98ceea070accd006c4036cbf169de3ef7917da9f3ffb39d49eaa4915ca8fc67ae3c0d6ecae"], &(0x7f00000000c0)=0xd1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e22, 0xfffff800, @ipv4={[], [], @multicast1}, 0x9}}, 0x3, 0x5}, 0x90) syz_open_procfs(0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000df0)=""/526, 0xa9dceadb052c07c7) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="6112f78a6e42209d36635ea9f7b3b89184dbb1d94c000000202061135000003db0f4bbdd3927e048e684c953000000bf2000000032f5ce4daea5926805950000000000000069260900000000000000000000000000fd0600000fff07003506000002000000070600000ee600001f65000000000000650000070700004c0000da6899517636845baebaa5b2001f75000000000000bf54000000000000070400000400f9ffad43010800000000950000000000000005000000000000009500000000000000d05bd98c13cc1709ab91e0b9e1e603f862b517351446cfdda7f31d8cb72353d1c4b75ace968538f5a482be06e1666f6e9fb11c1679567d65de290c298eda25634c8a6b6aa720be6e59e7ba973dbc9a33b07ea0e1262352326fefddb40db2ca0c3404f5cd00000000000000002ef6b329e4d93f590a5fc2047fb7647ac611fbe767691f56217c45401f0f36d31e39952505c544b5a7a9d8b063fe53886800be18b86f63b146753c2267cf6801b2ae8822a8f91aad2aec1a03652827e7e781cbc6fa8364"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) 21:05:56 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:05:56 executing program 0: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r7, 0xbef, 0xffffffff}, &(0x7f0000000100)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4fddf, 0x0) [ 592.548392][T16902] ubi: mtd0 is already attached to ubi0 21:05:56 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 592.774347][T16908] ubi: mtd0 is already attached to ubi0 21:05:56 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 592.966463][T16911] ubi: mtd0 is already attached to ubi0 21:05:56 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 593.157570][T16914] ubi: mtd0 is already attached to ubi0 21:05:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 593.345237][T16917] ubi: mtd0 is already attached to ubi0 21:05:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) fsync(0xffffffffffffffff) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x2}, @enter_looper, @request_death={0x400c630e, 0x1}], 0x1000, 0x0, &(0x7f0000000580)="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"}) dup(0xffffffffffffffff) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r4}) 21:05:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 593.973025][T16926] ubi: mtd0 is already attached to ubi0 21:05:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 594.163616][T16929] ubi: mtd0 is already attached to ubi0 21:05:58 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:05:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x1e, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='stat\x00') sendfile(r2, r3, 0x0, 0x1) clone(0x120000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000ac0)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r9) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r7, @ANYRES32=r9]) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) sendmmsg(r1, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="f62bef12239604edb9b537de46e74e77292bcf943d0e2836dc798b4c40b55e6cfa48cf2a4e5e8cacf4ef9db92d8994d05e56274adc18d9", 0x37}, {0x0}], 0x2, &(0x7f0000001700)=[{0x70, 0x10b, 0x7, "c5b204aef6356fe2b3481f8bd059ed70342d29dc4a7213a0332a8e1730ae9e6186b0a924c161ef26f72b8cfd243af26bf539dfd46a123c483cd67245e358b559efc4fa9f11c0802feb308d8b5a00ed0407171feca1be6d8006488af1"}, {0x40, 0x3a, 0x5, "68139834fc6fac3ea00ced07b7ce3e3ee49e493eeaa68504252cf43f910dec22d877cc15b287b5d84450a17a5fb1a4"}, {0xf8, 0x88, 0x82, "a875b360ed8ac9f03de930b8529b9f32ae1aefd76e691ac8fdae740b4789158d74a8f303617f76a03f273d3456d66936616034bf8b360a78cbbe1e1f03630e2a7a1b0f7ebb37ffa93b5d7e326573b36713b916a72c0984e74877e91cf064f21b2b41e2d08d00f8c04c4da25a4fbe88b4c42744fa222998ea2666721fd1179c03c267eb73a8f01abe77cfcd8e1b98aa56daf7824d0ee41694e5b986b80b50c21d83bbed4354bbe80bde6e9693340db04c7dce4a1e6d312ebe233a142c027edec9a7920bf95789759191e088537d1f003315160062a96c57dcaed7fcfd59131091839f90bb62b04a"}, {0x30, 0x118, 0x8, "e41595ffab703e92ab95eca0990a9f62aa0cc3e1c07339086194bea570"}, {0x78, 0xff, 0x50, "ed0263436fe0f626a44eb265ad1b68ebaa9224da7b4a10144bb8334bad7b2949d5a0a1b7ee72bc01c259443b75745c1d0494c29337f3138b80caeeacf5ffff6dd17caf19d14c7a77d9b9b665636c535cd2381c7ba86999f48ae19c899b8ff3353cbca46ea9"}, {0xc0, 0x116, 0x10001, "82f0a8b12a8c04687943e709fe2b76da6549b057ba0c39d0adadcf2cde9e5d912ca370307797c464e23250afec050f70aeb750cfbbdc1e006e90ab18c32db1feaee4f25869d16da658a7f2f76701ebb585cd147bdf69c7ec6d54b79d32e8302523174e4c7f66694f4823d02e611ac8671ac131091c128cf8ec60132adab6316992930ea40a0d44ae27ea766a07df07ef30faedbf13a97259315ca2ec9642396d56f8fc67803643903a6188"}], 0x310}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000002ac0)="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", 0xf7e}, {&(0x7f00000003c0)="3a2be335fd980ceef03a3f0ea157999ecaa10d7530bbb792ca4c3725ec2ef84e898d6310674517e7c4a3be8570febc413af4ca0c56b346edd81f467264c073cfac7cce9c3981f0047e348da7d15ca0d16a5a3018f184ab552b1b792685f98d0c8041a7b6ffe077a162b203d62e4b218ef60b3892a50b73e1e996c27c1b53ea7b5b9fcc2ee7a8d8658970e2c4b251a7440107c45fcb164b1e1029ac6be4baaf9d78f52fd3dd8a67972aed8a64004226b0f9e1d354ffcec5aa435f2721b7feaead01619eb37699fdc0e00265e91c575a53f830", 0xd2}, {0x0}, {0x0}, {&(0x7f0000003bc0)="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", 0xfc0}, {&(0x7f0000005bc0)="f8b49c6261a14900d954b47ed9cd44e92f80bf896c1374e4f8098233d218b75e66d67e9a66bbd7685c1ad33c374b7606edc2aa2e4593d0206d9a02c1f06ac126267e55cf4633c54533d7ce723f9e3462015256a105c1eac8a89258ac31", 0x5d}], 0x6}}, {{0x0, 0x0, &(0x7f0000006200)=[{&(0x7f0000006140)="ffc2da8cbe3eac3464a67ba3ab186d93d97cdadaf63083595f6c22d2ae1adc86ddba54db7ffbb265ae4895ce01c1946829c5f706db03bcf0a24584243105c7a8d794712476e8140f35b9f56b7d02314cabb663ffcbf92416ed8710dcfb5499e288589ada87d5c8aaa8054377cfec5d9a", 0x70}, {&(0x7f00000061c0)="0199e6a494e9ced98454b2579cd9846a8efbaaa5b3719e25a7ea6ec971f127ac", 0x20}], 0x2, &(0x7f0000008d00)=ANY=[@ANYBLOB="c0000000000000001001000000100000c14060222e6e253d51cbb4a4940bee4891b98baf10ce73ab1eed19269bab27a0c5e42b8ff976ecb21a70e68800992750c931e536f12ba057b6af4971a4d38454bee85db5f4b3992e7d7fa58a9246656e2f1a5fb778dc2dbeb11a1dc6acf611f6c31c9d36c4a63c87a9809d695be092f3adca9fbc60332b429ddab184a986060ff7af2f72877fc43aaa00b6624d7c0627a9f7c255746a108ddd6b3fd122251394da37d1adcfaa177a2b62de0000000000101000000000000011010000000000005a4fafb0d94da79d6abbd226ffbfd14e5c38e33307e650ffb81f6c5b9267d5d92679a48f52d59d77a07af3691c52cb27d5ff3816754ddef922eb42af4e0f71e951f63b699917c92a2e62becd3a4ee206cc386bbb51b8461347a7157bf147c6c714ff335069149b80e49d7a13d8e98d574315ccee720d0faa4b12a2f50a67759a7ae8de1ed037b4c08d66cdfaea9631affe558b65872538efb9e8cf683b3b8fee619abde125b3bf5ea5680e98de5f72cc6307d0acbaedf120f6aac07b5f0cf603aa8d762d6275f982aaadd0b2e2f9c7d80999f84e103e6be814ed320d8d5486528ca1ee70b5252708c566562c26fbf00ebba64aff194efdff0ac55e91301af27dc59508e8bc851df9af8d982a8cff4e1e651ce417da9e45ae796e78c2c94543f58061ff8b0a9c587576a0337b914b5c415629abf13b09389c439a9e0956a363a7232a981b9fcee8b980f7b4ed575352e8b83e53d6cc4638cbc4150652b60928675b7f8f0794d622d40ef14dc8ec906c6eb283c8a44290c059668bc357abccfa88767c75ccb3894125c58504aa62fa0758f91964ac4f129cf3ae86c3991b255bf1066228116cbe51e6b1f948f297a961cc3f2d4e617631a108ef5ef4bea8acd21dea5021f648651491e6dbd55074d6f8a91e1a74ff2dfb9d4a4cdb9306a30e991f8eb9e369f2e4c2c0a7fd4be80140eeb5cf0c477902fc8b9638dfc50ea40329aebfd6c411ab0f60f3c326629455d7577a26463271449d1711a67a2c558bc02a91bb3fcd68c161a554a5299dea49480a7d9f801862d886a27f40c06289effc5cea1fc2687d14601dcd767b6b4bd901baded3850962e4bdfe7a9f46d56aa6a7b8ad3867ef2c2374e4a287963b0611885884a03eb297ede5d6daf47a4de02fc26993e857121b79df0861d359f5dfaa77f4cf87af93ea1992826411083553020000004f3482fdc3193dca556c53fde7fe2c282a711e7ac9b2d1988ec7743a395d7175cc727db87512b286a56a72cca735041632b73f9404571060a489d1dfb7ea707292fc384436e1bb2ab01ad67e9dd5be9874191e6a8e2bd47ca876658623902f4f4f8dee6d2dc25a30ff4677a46d16cf8db68f827efe9d30579d83a1c2a04cdb01079c7395e73d1fc2be772c0f4e5298342bb48edea72d4ab941d8362b3fd09a961f8ef1cd87008f68e6759a8984df0a17916ac181cc125f2792d40d9c66cb7f8073db6ec5e701b6ad0738716269f5c61dc91d7fc9cb68235e10ff59044b557ed9e6a0c9bd33465a4c7a27f5de2b8c04c0bc93484d25b27c4bfb71634c830e1f17fa1fca32b8024c035cc5f58da70cbc9c97a30b4f44fbe401e05cbf0a070f6587a8b979b250ec87e08adc9061caa6cc23f89417c048366b181269c11e98a2bd7b92a883f31d457dd5e6a93433dabf43698cf6a88857d2d46ab173b3f1a4f9c7c4fb9c2b8b28df118676f168fc30855d6e7c9eef649ecfca4a8ff3041f514034b9ded886cbe4132e163273d4169999f5f91b7b9ca09184876c9e527dd01de87127ed0e1e81c36aedf1b68cc0376c2d856aa36708f3c91297c747ac843e8cae8ec9ee557b6d912d05224df5696274be46a5c6a64db262ff125d27338efc239487825d9785402a70bdc887aeeaa34d55d31e5afe02a144d5c57abaddb0e5da8877238324115cad4280f2c766bd3d4e3decf39d0382afefb67cec49322f9c355fb9f50487cf2ec4289e6c981b63d1925f9405c55b50679826c67b5ad7bcbf233439b47b0bb091a051973e7207486b968c71452b26929d85a0aa8ede1cfcee07bf18939e0ef46ca1949d2ad704719befd022f1361916f43efa78a04dea2ba25aa2fb29e1fa566577515570b401bfac55565667711d6c8a23f474d3a003538b00090c87f654c0d2824caf388674d01ba5db81e6400c78adac98e696681c13e4c89b7cd5f892d436b52443960ebe50f2555b3b455871d4790ac184a3a6eeb809af4fbf4d423a3b35ef82c2d1d45442dd4ebbc8b236eb762c6d742afea1bdd92973e7ecf3ad4bcc8aa2d33dacf0556635c5e59f088d44a6de6e0d6913c7d4032308cdbe60cf0bc96ab0a6648325bb949992fb7c831283509b97e787af6bf120af2610387aa68f1983adf37241a350b6e84c27f4f648c359d5431c9c92b0d553cb7ab5a46c64f5584ba0d2a30653d4a9a3fac45bb036a95e396786957d87960f78ab5558caabb0cc67e0c6da027cdd4cf64926c5f4bef8ba9f9be26967d97620584e13d1e90ff5108ad0a0ca5a7cd4372d4b4473987e9fdc17a557b761ab3a6675146ca07d826b97a18dbe1e5c88d1184469250af974e7f77305806fd28a12dea2328a15191ddf3cb88d39d8b7177a0551a3a449dbc9dfdbccba77ee602452245fc6c0e3b5c1546d39965a66e08b61f44556f951905ab53e969d399b85587493f28eded6113aca4e8621e353ae8e5d08b2370b7430b708303777e14f7385061cbe2c69c3048cb7b3b7b72d197dd91a98c47b0b54b00e5d55956d04fa2e9279a8315d59736d2d1e54369170c34b781b591f0717c40f63f96d12a10966a9426fe7a448021cbeed388371de02b4b9603706d8226205f22d99ea67a2d8405b1e26fc17658da74135da389d6f2b83da40006f895bf03221dc6e22e1b6e5c058fc0fa292962a7b2ea87679c23eed64d712a7730b7dab43818e651dd65545375ed6979960d69c055e6b47b37472e6654fecf3cb4c6ec45af123d449bf34f889f18636896a5fad010c78ba6a06065baf2b3f2f8ab15d1969af75d5f56ec93b48a723c2390119d17df1cefc9e45bde0d3cf4a222fecf4bae0cfa944a966e94e1f9907ff3182bcf98f18d6a6c03ae6c6a19cb5bf4252adae2b95d9e0f9910673f6ccb4c591c531f0355351cc367f0855f1eedbdd4532d330971f5d82848afb7610cbd8bcc1378e1581d7d738fc911b6ec7c7784e385155ee679fe3a8cd1d03da7e37cce488a16f09e9b55e1fb99a8eb310ba01ad3f7fc45800e8e5869121e997207922045944cd778dc5d1b1c2ee5c6c8a2cbdf268ee3268ce81827d201cbc0248140dbb05ac730441c00924759681ab9e020a876401419c7707da4993aabd99ab590ee4ae6be8502ec2cb99f4a20d47c973017b47143aff775c894cf198524ace48aade0ca157b4d0ca5baf3b6a8336dbc52a8f59db8ed8f0d979a015e2afe3ebcc443119a3f17529b359bc224b99746338b6e63bea10f5d2462f51ab12dd8a0f7d66949b0f0c259d8cb92c045957c756ac8d0933cb5c8c5616deb2c17cd502a78249911cdbcf0ccb1c77d216776e4f249e29e16ff943024538e0086f74736ae14cce950c64ba19f3f3569760854a1d58585264a803acc4b9f812b3b4279f89e2a333a9de9cd937c62d063abd2291ade298947c24615c9187f1bf3fc463f7c315cc9ba497b0f04f27bcba05eeff1f71bca94c1393270f79f66e5af48c176ec206bd28069ec98ee8deade213e603d54073ec597d6e095b1b720a31ee7bab87cda0c682a30edd3eb52e20d3030f3085b622e0ef1dea8a4d9a365f30798591b0ba95b25dc3f02f7794365b212d1488c81432d7c00f7e88684c664d87a37b56432265ea6f40509b9711024b019958b16d8db64fadf046f82976d51361ae9ace95a06e7a6ec70b4c9dd97d25137df87e5ca9d2f1a4787d1096b0dc7560203800c58de82c9e5b642bf3d21a1cdea042553a1407970c11e7ba13e6aecdd3502966f840ea0d1ee32adaf4e2170ac44932bd7c9077bd8179dcb1cd715724b08bc4b899a279bb5456b4b276de695e29bcd0e0d2bf8a8d1bd4f5ed9f57ee0b648722f2da9ea8888ed5b50331f82e548e148e1aca7f7c076a678663218fd1c4337334d09af5ba96f1b3c23c81e9e143bcf3dcd71711f95db9eb9241460d37b09ef320cc33cecb309cf4ca5d8e8f5b3f84a60f073c4ebc9f39c1c531ccef9c11a4b4d8d121746e41bb6e7a67d9970e32e77c45889e0c956765b6548b9b0f6e8c98f331aafb3bd5602db9929eadfa4031c29d181e047065980ac7a39a258db3f7c52860a76147761622be1c6f86c0633631836bd17429c69f12d9457421c6194a6e89b220e04a926e2ca720f3e0b17268f9d8aa812d4fed781651af86674af8f5bd86c508bf2312c04f9d54abbe998ecff6c6033308be41a29dc34ff7b5bb1749669830434bb40c58232838b006934a45a3c50c6d0f32f7fbed37d862c7ebf14108423b2da4ac22b0b149045f9ae8bdd8fef096c67e7d8d4e1315141fce09dba0838157d39a2dde9502509c82906dc9f1b68cf33f3def771744301cd9d785feb53410be7ec9430be5a5d78a531aaa9c7e248bb8ad129561c7be2a77d6824ba13f206227cd563ed3180b74949341ca30418fa723b7611e1cc57e1844e038e45971aa482ec8d89923c25cfaf71a2e5be9d424d9b128bc941e3625a14684bbed0deadaaddaaff4da1336e06375dd8623111ae4c63b20ae96993f5e73a04969b5c4d41794a63f219cca5b3f229e4c5fe4700c72b50422b29114b739cdaeeb5b9b0eefef2fc6c8c0f1eadffe02ef43cacfd7f6eaa9ee6a58534c18690ae24c96b5601e96cc2b05aefa3f15df1711cd44def6b68a3bffb8bd1b6aa3298dfbd1d1f20c6d63c3a92f69f739e2a5c7c78afd3767045c53622a9325bbf969f73d3cda7f792e79d87ecddee67806edf9334ed205da8ccac22b89fe464a764d2b3aace3eb6ecff1585c53a3cc2b527a8167f9c0638f5e33fc3a3fde509c8c039db6daa0787ace35b07357852c4eb9ba4876d26f9423dd18ba4f6b1795395c83212cc30aca6c8e89fdabd29d2bd5daa4a0081f1bca1ff467203678bc8a4179ed34ef11ecf4b0a90e1671375c83f7c7f8f1114e43aae786712fb2abb08735d423e2bcc3d913dc3535d35d666a28a73776553c34abbfd240725b013af18790fdb943761009e31a457f9dc9ceb5eac178c08afdc2fd091d5af7404d59559b7256678e9e78173dd4b33c4f44bfdbd0dbba417e39ba6a5fc1033466f6b1eeaa9ad7a6f5bf7c451480ce9d8c97aede9f7dde21a2a844cf25c51cf386468e00d5e1663dc65bfb39c346e2ce05efcf3620f7fbc0518bd594a0c36dc0871fdad0301b3f688ea035029b0412e08bd0d46dbde59edca01f46486a6a305a28efb146fd4492e9d6224d586d4a57edd63919ae237ade340e75466ea649911942aabd67fff294051c778a6bbd0a40578eed8cb78fa24ced81c830db1d353f5132cdd255784975e03cd14a329d1c92cfa0f88a45d34a91cf1afdeb1fc2e8010fe6fb1afa895ecdd8bddaf821b9a9aced4d0af51504bd70612e21fc341afefe0cbbbd77644f2920eb61d36778c1dd34ee9d806ff61ff6b17805dafd5d884947694172f651f0881488ef699555794eb132fb2fb7a2d98998d99638894c1d0a6a778cf7f0022bb8e7e804ee3ef930435be81f8cf4883feac07e4f93a0da3079d01ecebdadeaa1c42189bb235cc8a10e273069b788d10a13c0072f189e6d6aa0606642b564f928b74f961adcfac6c199e409d9f6cd97bf03318b1d25f45232fa141a195f375ff99ac7096fba5931dc753aea75954d8993526d156c1638eefb1c3d3d91cecbdd531ba6eaa35c69a955eb6befc58952fea33203be560f41de567a344c1f0b10207e30ceb3fbde07b58b5072febab89945d064036ee0ddf6c241ae10cc24c6c67f567eaaa5503f0ef1e4c40c147ef219fb5c172212fcaf17125f484e64a04930f62bf4199434c9b3113abd7e1ac7a7dc1ff927ff6ac423145427b9c10c3336213f33d7000060000000000000000600000000000000addbc3a37971e6c7ec48178a3b9c3679e190fa96514e1cc8abddaee3b620628d997ec65b069fc2758ebb89a4438e261ba6326ce1bab5c6ac5eb3ed383eedfdf194037707d9f23e5eab1f8bdd8c6a500038000000000000003301000001000000667ea4a6dffcbea218d3f20dfcc80d663c89c2f2f80200eaa4d314864693df76d05043361bdae0a3"], 0x1168}}, {{&(0x7f0000007440)=@caif=@rfm={0x25, 0x0, "23153ee150479244d2f75fe447e1b42e"}, 0x80, &(0x7f00000088c0)=[{&(0x7f00000074c0)="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", 0xfbe}, {&(0x7f00000084c0)="1d729dc4a98f06455345cc7e23fca78926bae00613a198782e0c2535729a189daacd5b81f2b94e879d24793140540cc9edf9a0bd150c314d75b40402b08288f7991e872d4d3e2833633aade5e3eaed60a180b69a", 0x54}, {&(0x7f0000008540)="764d1bc6480bcd4a3ca3fbca1ae20cbbe23e2a22f5c301a497d437991e5f46b02903883a3636aa3f905de6f8de90a8aa31165fa1cfa6ad47579c2e02c094f89f26660688e2c656cc091b81b7ff36d4d33ff8fe2c79cf0a0ef2e39c9309f7536855f145cbd7a137adf56706253c1cc113398f0faf6c35b24e942c8e4010b4c78883e45735c090d7db8806756da8d702013a648673c0a9c1ca07eb873edc2e91b9e90483d411857a5c3aa4788bea22fbdfaa6aa3c4463604fa98aa82f468ca60dd44406bf5bc58c86b43ca2397e5a05252b2b66c906edb2d579926aa0ab45c8e47b49b7152999b3f3e6dfbca63d8", 0xed}, {&(0x7f0000008640)="cec92edbd5eece9e79fab267fa46498ecc1055e149d17eae8d1a9ffc345499fa192d215196b462816ecbc8df39a5112380c2eb1f4e96fc88b6dfe75c663e5be12f2a2950c09653c1366c4fe38f8a54caca5ebc5bad2889220b477a804abc3e123c6b22bd21f2f0d9a493154653514ae31e9a2c0d66c46889c0b6cde4096064b57cf0cd3346398c00a35e0c33c83cfe466ee8f8cc", 0x94}, {&(0x7f0000008700)="f2806c916903838f93e2be67ffef9f576f6b48983192cda8dd60ebcfa640333c211d4fbdbf21342cb25401c2808e9b11d1c36622aa829a2c3d731226e6569561ee2670b5670671a1308b0c942b76e766ba838a72baee2030", 0x58}, {&(0x7f0000008780)="39459c3ee95694adfd", 0x9}, {&(0x7f00000087c0)="43b65cd61c199e92137acc5376872c0c413c3da4426e3f9a8e5b4b335288d2f7398e932d4195ad82a5204e9fbb69335f2fdcf0bd812ec042369cb1033f2b1783f62974f5f38eb3b410e632daabd9b730724964b98e0bc3ee8f77b042a6480ec90ad8a5b4bd2522a9b56057326bc8ee3c2c7ca05d3028600c2c2149bc22d06868ff5ef750ec444f118db8052a0469f1781c5d8a56ebc470e6305cce8ac8733a83404b32e7add444a635bff8094f57c0cf8cab159abe9dd3c2de506d98c1673ca1c08b79f4f5c6f9a9892d66e8265ef7ce2a94b87a3dde41a1d4a1e172d2575dd02e59ccb422dbaddf1945455b31463ee2f9", 0xf1}], 0x7, &(0x7f0000008940)=ANY=[@ANYBLOB="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"], 0x388}}, {{0x0, 0x0, &(0x7f000000a000)=[{0x0}, {&(0x7f0000009e80)="129c28ba506e470662f431f8f48d6915cd268646f55348ac6fce7f5412d17e235e436e4548e6ef2e92bdc00b4d1cfae23655e65847c1541cae8094d369eb473ae1b24b0abab690b2eec34bf033e22ddd1cd866873cc735ac28c91938ee68409c58166c01f911ff783c149b4482b50da262fc94a25736ff7c99872fdb4d", 0x7d}, {&(0x7f0000009f40)="5a3ec91a6e7933d0baef9ed8df14e297376c97d4bb063f02d10c7c16985beffa7ac7d18b4a0fe94a18", 0x29}, {&(0x7f0000009f80)="7bfc7f1468676364377660719a0e8bdf6ca11f05df02efd612b05d296043fcece700f3cb5748409eb2fcdc0f015633e625de77215c002f89f806d0ee503989545d681d0338de4b97f9e110453ef6a1ab848b9b95d9fc67fe306ae8484f0b51dc3dab401c53ce56", 0x67}], 0x4}}], 0x5, 0x4) shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r11, 0x40046205, &(0x7f0000000180)=0x98) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0}}, 0x20) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) semget(0x3, 0x0, 0x20) r12 = semget$private(0x0, 0x207, 0x0) semop(r12, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1) semctl$IPC_RMID(r12, 0x0, 0x10) semctl$GETNCNT(r12, 0x0, 0xe, &(0x7f00000004c0)=""/210) [ 594.399991][T16933] ubi: mtd0 is already attached to ubi0 21:05:58 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 594.673864][T16939] ubi: mtd0 is already attached to ubi0 21:05:58 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) [ 595.037763][T16946] ubi: mtd0 is already attached to ubi0 21:05:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) [ 595.380214][T16949] ubi: mtd0 is already attached to ubi0 21:05:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) [ 595.672427][T16953] ubi: mtd0 is already attached to ubi0 21:05:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)) 21:05:59 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x150018, &(0x7f0000000480)=ANY=[@ANYBLOB="746b616e733d664554d2393341e4b5", @ANYRES16=r3, @ANYBLOB="0b6ac109006f3d2464c68ab9aecf44afb5eae56b0c02875a3c9b37f28a591a29e62394f70514afafaf1ddb4a83ef58075605bceb522fd52eda598161c97579b9f587a1109b065ab29103415d905d80c5e1fdaf27eb43fde9b02cf25681ee65e60009f26ed1d10000000000005cdcc68337", @ANYBLOB="e47464d6333d63a1dee449830a2f60c32530cb576c2f7a1bc50bf9dec0e4d0f239b9974efdb9c24ed878157e369b300bd2cb1123b7fdea000f8fefe85bf429a84c007670440986db338de47c94d577c2638c327c6b49d6773ea8e16b8c5c43944a480ce807dd5cc2062c67a508be6b4e62a75cd8124747d518e93d3d7c8b2fd10caf8363d4cfa1731c7a548bdb3a3abf1fb19fe5c8ed74ccd136ae10b49a23d6b191a85e5c428af26c3517a9f0bf692da869b2", @ANYBLOB="2c6163636573733d757765722c616363de42733d61ee667363616368652c70726976706f72742c00"]) socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) [ 596.017952][T16961] ubi: mtd0 is already attached to ubi0 21:06:00 executing program 0: socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = open$dir(0x0, 0x100, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x0, 0x0, 0x150, 0x0, 0x150, 0x208, 0x208, 0x208, 0x208, 0x208, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'gretap0\x00', {0x20, 0xc8f9, 0x0, 0x0, 0x0, 0x6, 0x5}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r4}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r1}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x226}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x14) 21:06:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)) [ 596.196090][T16966] ubi: mtd0 is already attached to ubi0 21:06:00 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)) [ 596.263167][T16967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 596.454157][T16967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 596.579190][T16972] ubi: mtd0 is already attached to ubi0 21:06:00 executing program 5 (fault-call:8 fault-nth:0): r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, [], 0xb}, 0x7}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xce, 0x681, 0xe71, 0xe0}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000014) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) listen(r0, 0x0) syz_emit_ethernet(0x92, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x5c, 0x6, 0x0, @ipv4={[], [], @rand_addr=0x6}, @ipv4={[], [], @broadcast}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9, 0x7}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0xa, [0x0, 0x0]}, @md5sig={0x13, 0x12, "6ef5bc148986f8b0d5e4c7033ea531fa"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xf, 0xf989, "ce36fe2eaabe80ba41ec6d"}]}}}}}}}}, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x400c01, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, r6, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_NODE={0x4, 0x6, 0x0, 0x0}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000001400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r6, 0x100, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44840}, 0x11) [ 596.998784][T16980] FAULT_INJECTION: forcing a failure. [ 596.998784][T16980] name failslab, interval 1, probability 0, space 0, times 1 [ 597.032964][T16980] CPU: 1 PID: 16980 Comm: syz-executor.5 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 597.043000][T16980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.053074][T16980] Call Trace: [ 597.056501][T16980] dump_stack+0x197/0x210 [ 597.060937][T16980] should_fail.cold+0x5/0xf [ 597.065479][T16980] ? setup_fault_attr+0x1f0/0x1f0 [ 597.070779][T16980] ? ___might_sleep+0x163/0x2c0 [ 597.075855][T16980] __should_failslab+0xb7/0x100 [ 597.080808][T16980] should_failslab+0x9/0x14 [ 597.085426][T16980] __kmalloc+0x2e0/0x770 [ 597.089806][T16980] ? tomoyo_realpath_from_path+0xc5/0x660 [ 597.095581][T16980] tomoyo_realpath_from_path+0xc5/0x660 [ 597.101174][T16980] ? tomoyo_path_number_perm+0x193/0x520 [ 597.106867][T16980] tomoyo_path_number_perm+0x1dd/0x520 [ 597.112388][T16980] ? tomoyo_path_number_perm+0x193/0x520 [ 597.118072][T16980] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 597.123948][T16980] ? __f_unlock_pos+0x19/0x20 [ 597.128792][T16980] ? __this_cpu_preempt_check+0x35/0x190 [ 597.134546][T16980] ? retint_kernel+0x2b/0x2b [ 597.139201][T16980] tomoyo_file_ioctl+0x23/0x30 [ 597.144076][T16980] security_file_ioctl+0x77/0xc0 [ 597.149292][T16980] ksys_ioctl+0x56/0x180 [ 597.153703][T16980] __x64_sys_ioctl+0x73/0xb0 [ 597.158411][T16980] do_syscall_64+0xfa/0x790 [ 597.162959][T16980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.168977][T16980] RIP: 0033:0x45c479 [ 597.173015][T16980] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 597.192665][T16980] RSP: 002b:00007fa09855bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.201106][T16980] RAX: ffffffffffffffda RBX: 00007fa09855c6d4 RCX: 000000000045c479 [ 597.209097][T16980] RDX: 000000000076006e RSI: 0000000040186f40 RDI: 0000000000000004 [ 597.217093][T16980] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 597.225181][T16980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 597.233180][T16980] R13: 0000000000000207 R14: 00000000004c3ea9 R15: 0000000000000000 [ 597.297794][T16980] ERROR: Out of memory at tomoyo_realpath_from_path. [ 597.306859][T16980] ubi: mtd0 is already attached to ubi0 21:06:01 executing program 5 (fault-call:8 fault-nth:1): r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 597.562289][T16986] FAULT_INJECTION: forcing a failure. [ 597.562289][T16986] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 597.575543][T16986] CPU: 1 PID: 16986 Comm: syz-executor.5 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 597.585464][T16986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.595538][T16986] Call Trace: [ 597.598876][T16986] dump_stack+0x197/0x210 [ 597.603385][T16986] should_fail.cold+0x5/0xf [ 597.607926][T16986] ? setup_fault_attr+0x1f0/0x1f0 [ 597.613165][T16986] ? mark_lock+0xc2/0x1220 [ 597.617627][T16986] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 597.623155][T16986] should_fail_alloc_page+0x50/0x60 [ 597.628369][T16986] __alloc_pages_nodemask+0x1a1/0x910 [ 597.633748][T16986] ? __alloc_pages_slowpath+0x2900/0x2900 [ 597.639477][T16986] cache_grow_begin+0x90/0xc60 [ 597.644287][T16986] ? trace_hardirqs_off+0x62/0x240 [ 597.649402][T16986] __kmalloc+0x6b2/0x770 [ 597.653630][T16986] ? mark_held_locks+0xf0/0xf0 [ 597.658401][T16986] ? tomoyo_realpath_from_path+0xc5/0x660 [ 597.664118][T16986] tomoyo_realpath_from_path+0xc5/0x660 [ 597.669656][T16986] ? tomoyo_path_number_perm+0x193/0x520 [ 597.675289][T16986] tomoyo_path_number_perm+0x1dd/0x520 [ 597.680735][T16986] ? tomoyo_path_number_perm+0x193/0x520 [ 597.686359][T16986] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 597.692151][T16986] ? lockdep_hardirqs_on+0x421/0x5e0 [ 597.697438][T16986] ? retint_kernel+0x2b/0x2b [ 597.702059][T16986] ? __fget_files+0x359/0x520 [ 597.706731][T16986] ? do_dup2+0x4f0/0x4f0 [ 597.710971][T16986] tomoyo_file_ioctl+0x23/0x30 [ 597.715731][T16986] security_file_ioctl+0x77/0xc0 [ 597.720682][T16986] ksys_ioctl+0x56/0x180 [ 597.725022][T16986] __x64_sys_ioctl+0x73/0xb0 [ 597.729630][T16986] ? do_syscall_64+0x5b/0x790 [ 597.734303][T16986] do_syscall_64+0xfa/0x790 [ 597.738835][T16986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.744720][T16986] RIP: 0033:0x45c479 [ 597.748613][T16986] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 597.768201][T16986] RSP: 002b:00007fa09855bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.776633][T16986] RAX: ffffffffffffffda RBX: 00007fa09855c6d4 RCX: 000000000045c479 [ 597.784603][T16986] RDX: 000000000076006e RSI: 0000000040186f40 RDI: 0000000000000004 [ 597.792566][T16986] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 597.800527][T16986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 597.808496][T16986] R13: 0000000000000207 R14: 00000000004c3ea9 R15: 0000000000000001 [ 597.955373][T16986] ubi: mtd0 is already attached to ubi0 21:06:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000400)=@ccm_128={{}, "78395c95d0fdfb60", "520b1e4aa0f71c22ff00", "a9016007", "f6885a10e7196cef"}, 0x28) r4 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) r8 = open(&(0x7f0000000300)='./file0\x00', 0x400a80, 0x185) r9 = accept(0xffffffffffffffff, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000001780)=0x80) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xff9f, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r10, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, r10, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LISTALL(r8, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x114}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r10, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4400) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INIT_ENTRIES(r7, 0x0, 0x83, &(0x7f0000000500)={'nat\x00', 0x0, 0x3, 0xbf, [], 0x9, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=""/191}, &(0x7f0000000280)=0x78) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x8000, 0x2, 0x8000, 0x7fffffff, 0x0, 0x8, 0x0, 0x6, r5}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x541, 0x200, 0x7, 0x7fff, r5}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r11, @in6={{0xa, 0x4e21, 0xae58, @ipv4={[], [], @empty}, 0x7}}, 0x8, 0x401, 0x2, 0x8000, 0xc1, 0x7fffffff, 0x81}, &(0x7f0000000180)=0x9c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf595, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) r12 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 21:06:02 executing program 5 (fault-call:8 fault-nth:2): r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 598.499913][T16995] FAULT_INJECTION: forcing a failure. [ 598.499913][T16995] name failslab, interval 1, probability 0, space 0, times 0 [ 598.524577][T16995] CPU: 1 PID: 16995 Comm: syz-executor.5 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 598.534528][T16995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 598.544604][T16995] Call Trace: [ 598.547935][T16995] dump_stack+0x197/0x210 [ 598.552303][T16995] should_fail.cold+0x5/0xf [ 598.556829][T16995] ? setup_fault_attr+0x1f0/0x1f0 [ 598.561879][T16995] ? ___might_sleep+0x163/0x2c0 [ 598.566766][T16995] __should_failslab+0xb7/0x100 [ 598.571640][T16995] should_failslab+0x9/0x14 [ 598.576164][T16995] __kmalloc+0x2e0/0x770 [ 598.580426][T16995] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 598.586893][T16995] ? d_absolute_path+0x11b/0x170 [ 598.592401][T16995] ? __d_path+0x140/0x140 [ 598.596761][T16995] ? tomoyo_encode2.part.0+0xf5/0x400 [ 598.602191][T16995] tomoyo_encode2.part.0+0xf5/0x400 [ 598.607441][T16995] tomoyo_encode+0x2b/0x50 [ 598.611905][T16995] tomoyo_realpath_from_path+0x19c/0x660 [ 598.617587][T16995] tomoyo_path_number_perm+0x1dd/0x520 [ 598.623070][T16995] ? tomoyo_path_number_perm+0x193/0x520 [ 598.628740][T16995] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 598.634580][T16995] ? lockdep_hardirqs_on+0x421/0x5e0 [ 598.639893][T16995] ? retint_kernel+0x2b/0x2b [ 598.644563][T16995] ? __fget_files+0x359/0x520 [ 598.649278][T16995] ? do_dup2+0x4f0/0x4f0 [ 598.653539][T16995] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 598.659985][T16995] ? fput_many+0x12c/0x1a0 [ 598.664475][T16995] tomoyo_file_ioctl+0x23/0x30 [ 598.669372][T16995] security_file_ioctl+0x77/0xc0 [ 598.674369][T16995] ksys_ioctl+0x56/0x180 [ 598.678667][T16995] __x64_sys_ioctl+0x73/0xb0 [ 598.683297][T16995] do_syscall_64+0xfa/0x790 [ 598.687835][T16995] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 598.693740][T16995] RIP: 0033:0x45c479 [ 598.697663][T16995] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 598.717278][T16995] RSP: 002b:00007fa09855bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.725694][T16995] RAX: ffffffffffffffda RBX: 00007fa09855c6d4 RCX: 000000000045c479 [ 598.733677][T16995] RDX: 000000000076006e RSI: 0000000040186f40 RDI: 0000000000000004 [ 598.741662][T16995] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 598.749627][T16995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 598.757588][T16995] R13: 0000000000000207 R14: 00000000004c3ea9 R15: 0000000000000002 [ 598.814211][T16995] ERROR: Out of memory at tomoyo_realpath_from_path. [ 598.825290][T16995] ubi: mtd0 is already attached to ubi0 21:06:02 executing program 5 (fault-call:8 fault-nth:3): r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:02 executing program 3: socket$inet6(0xa, 0x4, 0x62) r0 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c, 0x0}}], 0x1, 0x20000040) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000815bd7000fedbdf25010000000e0001006e657464657673696d0000001b0002006e657464657673696d3000000e0001006e657464657673696d0000000f00020051657464657673696d300000"], 0x8d}, 0x1, 0x0, 0x0, 0x8080}, 0x20010000) sendmmsg$inet6(r1, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c, 0x0}}], 0x1, 0x20000040) poll(&(0x7f00000001c0)=[{r1}], 0x1, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socketpair(0x18, 0x0, 0x1, &(0x7f0000000100)) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="44012500", @ANYRES16=r7, @ANYBLOB="000827bd7000fedbdf25020000000500330000000000030035003f00000005002f000000000005002d000000000000003000010000000800320000000000"], 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x10000004) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x78, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb2b, 0x20004}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1a}, @IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={[], [], @loopback}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x78}, 0x1, 0x0, 0x0, 0x4005}, 0x0) [ 599.237838][T17003] ubi: mtd0 is already attached to ubi0 21:06:03 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)) r1 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) r2 = socket$inet(0x2, 0x2000000080002, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r3, &(0x7f00000017c0), 0x3da, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) readahead(0xffffffffffffffff, 0x5, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000000)=""/178, &(0x7f0000000100)=0xb2) setresuid(0x0, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) [ 599.679638][T17010] ubi: mtd0 is already attached to ubi0 21:06:04 executing program 3: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000007c0)={0xe, 0x7fffffff, {0x51, 0x1393, 0x4, {0x6, 0xfff}, {0x2, 0x2}, @const={0x957, {0xffff, 0x0, 0x3, 0x5}}}, {0x57, 0xf9, 0x0, {0x9, 0x2}, {0x7}, @const={0x0, {0x7, 0x6, 0x9, 0x9}}}}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000380001000000000000000000e8000000e800000000000000a0010000a0010000a0010000a0010000a001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000b800e80000000000000000000000000000000000000000004800697076730000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000300053455400000000000000000000000000000000010000000000000000000200000000000000000000000000000000ac1e00017f00000100000000000000006873723000000000000000000000000069703667726574617030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b8000000000000000000000000000054494d45520000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000098ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000100000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x298) 21:06:04 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x2, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:04 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x10, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x108, 0x4, 0x400, 0x0, 0x1}, 0x3c) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="010000004934ebf6bd7624a6607f796228e933ba843fbda4227ad113ce25924230385ea2ec7fdb7569a112a476edbf5873", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r6, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r6}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000002c0)={r6, 0x1000, "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"}, &(0x7f0000000180)=0x1008) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000001c0)={r8, 0x1, 0x10, 0x1, 0x1ff}, &(0x7f0000000200)=0x18) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$MON_IOCQ_URB_LEN(r4, 0x9201) connect$inet6(r2, &(0x7f0000000140), 0x1c) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) r9 = syz_open_dev$media(&(0x7f0000001300)='/dev/media#\x00', 0x96b, 0x1810c0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001340)={r7, 0x2, 0x7f}, &(0x7f0000001380)=0x8) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000100)={r0, &(0x7f00000002c0), 0x0}, 0x18) 21:06:04 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x1274, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) sendmsg$inet6(r2, &(0x7f00000008c0)={&(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000340)="f9", 0x26c59}], 0x2f4}, 0x60) 21:06:05 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x2288, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x518, 0x3f4, 0x200, 0x70bd2a, 0x25dfdbfb, {0x2, 0x1, 0x21, [0x0, 0x5, 0x5, 0x1, 0xbaa, 0x0, 0x3, 0x81, 0xffff0001, 0x100, 0x4000003, 0x7, 0x0, 0x9, 0x7, 0x1, 0x5, 0x0, 0x400, 0x9054, 0x3, 0x0, 0x7fff, 0x6, 0x5, 0x7, 0x9, 0x4, 0x9ea6, 0xff, 0x5, 0x4, 0x3, 0x6, 0x7, 0x48, 0x2, 0x19, 0x22d0, 0x1ff, 0x800, 0xfffff666, 0x2, 0x6, 0x551, 0x463, 0x1, 0x1400000, 0x0, 0x2, 0x4, 0x5, 0x400, 0x10000, 0x1, 0x7f, 0x8, 0x6, 0x2, 0x0, 0x0, 0x1, 0x80000000, 0x7], [0xffff, 0x3, 0x3ff800, 0x8001, 0x2, 0x7fff, 0x8, 0x81, 0x4, 0x7, 0x0, 0x3, 0x2, 0xfffffff8, 0x80000000, 0x80, 0xffd, 0x5, 0x9, 0x101, 0x4, 0x7, 0xaad, 0x6, 0x8fb3, 0x1, 0x10001, 0x8, 0x4, 0x6, 0x51a7, 0xfffffff7, 0x5, 0x3, 0x3, 0x40, 0x400, 0x400, 0x1, 0x8000, 0x10000, 0x3, 0x0, 0x10000, 0x1, 0x3, 0xfffffff8, 0x4, 0x3ff, 0x7fff, 0x8, 0x4, 0x5, 0xcee, 0x7a1, 0x1, 0x1, 0x8, 0x1, 0x6, 0x7, 0x0, 0x3, 0x8000], [0x1, 0x3f, 0x800, 0x3f, 0x9, 0x200, 0x100, 0x9, 0x4, 0x50, 0x7fff, 0x9, 0x6, 0x0, 0x9, 0x8, 0x7fff, 0x6, 0x9, 0x10000, 0x2, 0x98a5, 0x440, 0x4, 0x7, 0x4, 0xffff, 0x1, 0x20, 0xffffff73, 0xfff, 0x401, 0x2, 0x2, 0x17, 0x81, 0x1000005, 0x6, 0x2, 0x4, 0x800, 0x4, 0x0, 0xfd1, 0x5, 0x7, 0xfffffffd, 0x80, 0x5, 0x8, 0x3, 0x9, 0x8001, 0x9, 0x81, 0x100, 0x10001, 0x3, 0x1, 0xff, 0xfffffffe, 0x7fffffff, 0x101, 0x2], [0x6b, 0x1f, 0x62e, 0x1, 0x7, 0x4, 0x5, 0x80000001, 0x2, 0x40, 0x6, 0x3ff, 0x7, 0x3, 0x0, 0x3, 0x200, 0x1, 0x5, 0x452ded6, 0x7f, 0x0, 0x1, 0x1, 0x2, 0x101, 0xb5f5, 0x4, 0x4, 0x2, 0x1, 0x0, 0x7ff, 0x2, 0x8000, 0x2, 0x4, 0x7, 0x4d4b, 0x1d0f, 0x1, 0x55c3b544, 0xbd77, 0x9, 0x7e, 0x3cf8, 0x81, 0x20, 0x2, 0x2, 0xadd, 0x799b, 0x8, 0x3, 0x6, 0x0, 0x81, 0x2, 0xffffff96, 0x4, 0x1ff, 0x4, 0x6, 0xf2c7], 0xf7, ['ppp1\x00', '\xbbmd5sum+.nodev\x00', '[md5sum\x00', '&trustedtrusted%#\x00', '%em0{\x00', '\x00(<\xf5=\xa5/e\x10\x88b\x06R0\v\f@d_u.a\xe9\xfc\x9e\xe1\xa6\xc7-\xb6\x10\x99o\v-\xea`\x92\x11)\xbff\x18\xb6\x15\r\x86>\xd0wti\x9d\xaa\xe9\x90\xb0B6V\xda\xac\xa7t=\xfa\x05\xf1\x02\x89\xd7\xbd\x1d\xad2\xc7\x8e\x92\x14\x92s\x8f\xdb\xa3L\xc5\xdfS=\x02J\xa3^\x0f\xa4\x91\x16\x86NL\x1d\tf\xe6\xcd\xb7\xb3\xe1\x06LN\xc5\t\x9a8m\"\xfb\xfd`\xe3\xa7\x18\xbf\x98\xc6\x00\xab\x9b\xdd1\xf1!\xde\x14\x8c\x91\xa2Rm\x93\xb7(^\x89s\x80\xd1\xa4\x8a\xd7N\x94\xed\x0e\xc7\xfd\xd9\xd4\xc4Ea\xa9X\x96\xa6\xd9\xbf\xf2', '/}[%keyringvboxnet0md5sum\x00']}, ["", ""]}, 0x518}, 0x1, 0x0, 0x0, 0x20000804}, 0x90) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={@loopback, @rand_addr="459ffe912abea04aef25e84aa34c82c4", @empty, 0x101, 0x3f, 0x1, 0x500, 0x6, 0x200008}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd0, r5, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc73}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xd0}}, 0x40000) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86020020920000000000fe800000000000000000000000000000000000000000aa00004e22000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c200009078000005d1ff25627afcf150acbd8b8291986ba8e1c7f0fe4ee8deb3c7559c4fb9921a44bf4af8f939b0cce32718a7690e03992494f44d"], 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_emit_ethernet(0x82, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x4c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8f17d394e300e5f7dc769dcd483e7c06"}, @timestamp={0x8, 0xa, 0x6, 0x1}, @sack={0x5, 0x1a, [0xfffffff9, 0x7, 0x1, 0x80000001, 0x6, 0x0]}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) 21:06:05 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x4c00, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:05 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x2, 0x2ebd319ccd5b2253) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) r2 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1}, 0x100) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) rename(0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_open_dev$media(0x0, 0xfffffffffffffffd, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000080)) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, 0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 21:06:05 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101141, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000180)=""/254) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup(r5) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.controllers\x00', 0x2761, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f000000ad80)={r6, 0xc0, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ab80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac40)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000adc0)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180310e8003b628a1ab6002000080000000000010800000000774f7c0000000000dd2c71"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000ab00)={0xa}, 0x8, 0x10, &(0x7f000000ab40)={0x0, 0xd, 0x7, 0x3}, 0x10, r7}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000017ae0000000000000400000085100000ffffffff5fb11000fe7d0100000018000000050000000000000008000000c49affff0800000095000000000000005ef01fad694cef107a0560520aa495c3ca9be7edcca0408254bc09d1879364d9c6ba1b873bee86fb23925bb0fed4167d1912a481b63938e205d5278e4488bbba42a33da6908e124c27b0cff250915cbdafe607de0af2c104d3e6b66e"], &(0x7f00000002c0)='GPL\x00', 0x20009, 0xac, &(0x7f0000000300)=""/172, 0x40e00, 0x6, [], 0x0, 0xa, r9, 0x8, &(0x7f0000000540)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x2, 0x579e, 0x80000001}, 0x10, r7}, 0x78) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000000)=0x4040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r11, &(0x7f0000000100)=r12, 0x12) pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000140)="80fd02", 0x3}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) setsockopt$inet6_dccp_buf(r15, 0x21, 0x80, &(0x7f0000000040)="a2fa71842844eb4a0010299f4a09d07e7530d9770438520ef6e4566be587b6998abcfcda4bd989ced1eb26463ef4e5f9f86bfb72a0567f7b524fa6ce7a974c116f6cf6cc741bdb32ea6b0d53bf026209cdb3eb1f91d58f8029422e9126c5e0a57433e8848ebf52cf47ca71813bea6d3c23f023", 0x73) r16 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2b3) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:06:05 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x4c01, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:06 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x5381, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x2, 0x78, 0x7ff, 0x2}, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000140)='nomand\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000280)) getsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt(r2, 0x6, 0x0, &(0x7f0000000100)="e738a6", 0x3) 21:06:06 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x5407, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:06 executing program 3: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x6, 0xabc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000280), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x11, 0x4, 0x18, 'veth1_to_team\x00', 'sit0\x00', 'veth1_vlan\x00', 'hsr0\x00', @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @dev={[], 0x35}, [0x0, 0xff, 0xff, 0x9e3074df3bec5e6b, 0x0, 0xff], 0x6e, 0x10e, 0x156, [], [@common=@log={'log\x00', 0x28, {{0x4, "60d013feaf2c6d82cafef13ad1fce22ecb05fbac5d9fc52935048e8223f5"}}}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x80, {0x3}}}}], @common=@ERROR={'ERROR\x00', 0x20, {"26fffeaafc1e803f82a5eef0a349afa88747dd4ea845aa5025d2c0d0dea7"}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x11, 0x4a, 0x6000, 'macvlan0\x00', 'nr0\x00', 'syz_tun\x00', 'ip6tnl0\x00', @remote, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x2a6, 0x2ee, 0x41e, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x13, [{0x8, 0x40, 0x4, 0xbe}, {0x8, 0x1, 0x3f, 0x400}, {0x3c, 0x44, 0x9}, {0x64, 0xfe, 0x6, 0x6}, {0x4, 0x40, 0xff, 0x7}, {0x9, 0x6, 0x1, 0x3ff}, {0x7, 0x4, 0x20, 0xfffffffa}, {0x2, 0xff, 0x5, 0x8}, {0x6, 0x4, 0x20, 0x1}, {0x7, 0x80, 0x0, 0x6}, {0x81, 0x20, 0xff, 0x80000000}, {0x7, 0x75, 0x4, 0x6}, {0x200, 0x90, 0x2, 0x7fffffff}, {0x3, 0x9, 0xb1, 0x3}, {0x0, 0x1, 0xe8}, {0x7ff, 0x20, 0x7f, 0x9}, {0x1, 0x3, 0x2, 0x9000000}, {0x3, 0x9, 0xfb, 0x2}, {0x9d79, 0x80, 0x7f, 0xbc}, {0x8, 0x4d, 0x8, 0x7f}, {0x0, 0x1, 0x8, 0xe55}, {0x6000, 0x9, 0x7, 0xfff}, {0x1, 0x63, 0x9, 0x5}, {0x7, 0x2, 0x40, 0x9}, {0xfff8, 0x2, 0x3}, {0x300, 0x3, 0x0, 0x1}, {0x3, 0x74, 0x5c, 0x8}, {0xfe6, 0x20, 0x3f, 0x2f7}, {0x7, 0x21, 0xf8, 0x400}, {0x79c, 0x4, 0x4, 0x80000000}, {0x1, 0x7, 0x2, 0x6}, {0x8, 0x40, 0xf7, 0x1}, {0x4, 0x0, 0x67, 0x6}, {0x1, 0x6, 0x80, 0xffffff01}, {0x3f, 0x2, 0x7, 0x3ae7}, {0xfff, 0x1, 0xc6, 0x8}, {0x200, 0xff, 0x5, 0xc4d2}, {0xfffb, 0x8, 0x7b, 0xfff}, {0x7d, 0x1, 0x7, 0x7}, {0x8, 0xb0, 0x7f, 0x8}, {0x9, 0x1, 0x8, 0xffff}, {0x101, 0x7f, 0x2, 0x9}, {0x38, 0x4, 0x5, 0xce}, {0x1, 0x0, 0x8}, {0x40, 0x7, 0x4, 0xffffffff}, {0x100, 0x5, 0x1, 0x2}, {0x0, 0x1, 0x85, 0x1}, {0xffe0, 0x4, 0x4}, {0x5, 0x2, 0x3, 0x1}, {0xba0, 0x81, 0x1, 0x1}, {0x2, 0x80, 0x7f, 0x4}, {0x9, 0x8e, 0x8}, {0x2, 0x1, 0x8, 0x6e}, {0xff1e, 0x0, 0x69, 0x6}, {0x3, 0xdc, 0x6, 0x10000}, {0x15c7, 0x1, 0x98, 0x5251}, {0x5, 0x97, 0x8, 0x9}, {0xcca, 0x9, 0xe9, 0x8}, {0x1, 0x63, 0x40, 0x3ff}, {0x2, 0x1, 0x1, 0x1}, {0x2, 0x7, 0x0, 0x401}, {0x9, 0x3f, 0xff, 0xfffffff0}, {0x0, 0x3f, 0x40, 0x247}, {0x2, 0x1, 0x7, 0x3}], {0xffff}}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"da1a41fd19e17b526c433b34632e8b870fda5fd2eb44e12af14557186263"}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:init_var_run_t:s0\x00'}}}}, {0x3, 0x6b, 0x6004, 'veth0_to_bridge\x00', 'batadv_slave_0\x00', 'veth0_virt_wifi\x00', 'netpci0\x00', @empty, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xce, [], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x3, 0x0, 0x2, [{0x11, 0x28, 0x88f8, 'macvtap0\x00', 'vxcan1\x00', 'veth0_vlan\x00', 'gre0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff, 0x77e147ac84130b1e], @empty, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xd6, 0x11e, 0x166, [@realm={{'realm\x00', 0x0, 0x10}, {{0x7f, 0x6}}}, @state={{'state\x00', 0x0, 0x8}, {{0x5}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"75b6930626a9327eb74cca718780de04f60cbd17e0900e2c5dd61c80aab2"}}], @common=@ERROR={'ERROR\x00', 0x20, {"d7b7d9ed4c533bcd276b87cb5fbaed7b69f85e5ec90c779654702362c641"}}}, {0x11, 0x40, 0x60, 'veth1_virt_wifi\x00', 'macvlan1\x00', 'sit0\x00', 'ipvlan0\x00', @multicast, [0x0, 0x0, 0xff, 0x0, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff], 0x9e, 0x116, 0x146, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x7e, 0x0, 0x7, 0x2}}}], [@common=@nflog={'nflog\x00', 0x50, {{0x121, 0x0, 0x7, 0x0, 0x0, "4f72a5ea742825c85b7e3629991833ce937601de477744ae79224bf0fec6d1b7a937f98bd1ed265e84a198acdbc06c1e00d2d3dfa53c0d1192556b296d5aeffe"}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc, 0x1, [{0x5, 0x20, 0x8917, 'bond0\x00', 'veth1_to_team\x00', 'ipvlan0\x00', 'ip_vti0\x00', @dev={[], 0x38}, [0xff, 0x0, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xbe, 0x10e, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xffff, 'syz1\x00', {0x2}}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x1}}}}]}]}, 0xb34) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x88000fc000000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x1, 0x23e, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000f40)={0x4, 0x4, 0xeb9, 0xffff}) r3 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r3) sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) syz_open_dev$mouse(&(0x7f0000001000)='/dev/input/mouse#\x00', 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x2, 0x1, 0x0, 0x1, 0x8000, 0x3f}, &(0x7f0000000240)=0x20) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0xa20000, 0x119b1a31, 0x6, r0, 0x0, &(0x7f0000000100)={0x990a74, 0x5, [], @p_u16=&(0x7f0000000080)=0xbf5c}}) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000f80)={'HL\x00'}, &(0x7f0000000fc0)=0x1e) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a363a00f980f1b8939885ccbb3c3aeead2e22c90fef072256e00e678290f5bb3b5d2fcf887ffa7f0ec00b74473a06025b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e107eafa89021a7503a9fc0b01542ab5bd2d23e04b258634bd754c9d2488ad379fadccbfda227bd28f64d155039b07fb8289bac4c437c00843118590f6daf256b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb495bb16aa5910841ce8a3d50bd48827a0e142efb2718d8d3c529b8eddbe9eabb1ef6d23dcb0c5508c69f31649fac5b3a63"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) 21:06:06 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x541b, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:07 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x109040, 0x0) ioctl$RTC_WIE_ON(r5, 0x700f) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x2, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0x7, r6}) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 21:06:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x20800, 0x60) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000380)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)={0x0, @multicast1, 0x0, 0x0, 'lc\x00'}, 0x2c) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, 0xffffffffffffffff) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000000c0)={0x7, 0x0, 0x1, 0x5, 0x6}) mmap$IORING_OFF_SQ_RING(&(0x7f0000021000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_REGS(r5, 0x8090ae81, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f00000001c0)={0x3, 0x70, 0x1, 0x7f, 0x20, 0x88, 0x0, 0x9df, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1000, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0x1002, 0x0, 0x8, 0x4, 0x8, 0x20000000, 0x31}) 21:06:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000000c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x805, 0x0) r4 = accept4$netrom(r3, &(0x7f0000000000)={{0x3, @default}, [@default, @netrom, @null, @netrom, @bcast, @default, @rose, @null]}, &(0x7f0000000100)=0x48, 0x80800) getsockname$netrom(r4, &(0x7f0000000140)={{0x3, @netrom}, [@default, @null, @remote, @rose, @null, @rose, @default, @default]}, &(0x7f00000004c0)=0x48) accept4$inet(r2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68150000ffff00"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000380012800b00010067656e6576650000280002800500080002000000060005004e230000140007000000000000000000000000000000000108000500", @ANYRES32=0x0, @ANYBLOB="96d38f02bf7596cda3a4f333a88c9b30523dafd834d8cd453785e8892aa623ccab131f91d74a29b566aba4daff849a2ac547f4dcde432afbdc5593fdeeeeccac0bb8cd2fe66264d29aa1c27a706c2ac4f03df3099cfbbad860a5c4c47dacd28d870bb6b2d5a3b55bb2b4247a01017a6b1f33799c298289f22256b50d558b6ee089c2f42e2ea68b7cb6ed3b79945685798f74b4aad58e14f0c737968352c47dd5b9feed16bc47f9fc9956351b16d6dee261b2be3e8d8ceaab743b88f38c0218584dcacefe92dff6fbe8ca7d43000000000000", @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 21:06:07 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x5421, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:07 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execveat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000040)='-\'vboxnet0)\x00', &(0x7f0000000080)='vmnet0!#,\x00', &(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='iso9660\x00', &(0x7f0000000180)='sbsector'], &(0x7f00000002c0)=[&(0x7f0000000200)='iso9660\x00', &(0x7f0000000240)=')^{%vboxnet0nodevmime_typeself[-]*\x00', &(0x7f0000000280)='loem0-^\x00'], 0x800) syz_mount_image$iso9660(&(0x7f0000002780)='iso9660\x00', &(0x7f00000027c0)='./file0\x00', 0x0, 0x5e, 0x0, 0x0, &(0x7f0000000140)={[{@sbsector={'sbsector'}}]}) 21:06:07 executing program 3: getpid() sched_setscheduler(0x0, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$char_usb(r1, &(0x7f0000000100)="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", 0x1000) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, [], 0x13}, 0x1}, 0x1c) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fcntl$getownex(r6, 0x10, &(0x7f0000000000)={0x0, 0x0}) fcntl$setownex(r4, 0xf, &(0x7f0000000080)={0x0, r7}) [ 604.035227][T17101] ISOFS: Unable to identify CD-ROM format. 21:06:08 executing program 1: modify_ldt$write2(0x11, &(0x7f0000000000)={0xa15}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = dup(r3) ioctl$NBD_SET_SOCK(r2, 0xab00, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r5, r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000200)={r6, 0xffffffffffffffff, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x80082102, &(0x7f0000000040)=r6) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 21:06:08 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) dup2(r1, r2) recvmmsg(0xffffffffffffffff, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004480)=""/245, 0xf5}], 0x1}}], 0x1, 0x0, 0x0) writev(r0, &(0x7f00000023c0), 0x1000000000000252) dup(0xffffffffffffffff) mkdir(0x0, 0x0) inotify_init1(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 21:06:08 executing program 3: open(0x0, 0x0, 0x0) r0 = creat(0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000200)=@req={0x5, 0x4, 0x200, 0x400}, 0x10) mount$9p_fd(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRESHEX]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) getpid() fanotify_init(0x20, 0x8000) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg$alg(r7, &(0x7f0000001b00)=[{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000300)="53a46c2d642bcfa2e837c99a6f88c494796788ce2c0083697cc5b8517062d6e0e02e2c3b394863c3273f862c7cfbbfd2e69852e90ecac822bc12aa5e3878f750823174d440446ce6dc9e4641c916e7136a7e6fa9093eef72813da6994e4a90480dfa5b3b6bfeb296ea27c3b7", 0x6c}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000000480)="5f90cf990a94c7649e63760bcaac0c626b97d677642b6c128eb7d4d48535697460eb74d4f44cc7f14df610045ffc4dd5b932fa55c52d6d62ca864beef64ba19fde76808321bfbaf0d2af7dc9e29ecfa9ffc88f4f1c18516e261e6e21d331ef881857fec3deb69eff1f509c18", 0x6c}, {&(0x7f0000001b40)="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", 0x150}, {&(0x7f0000001780)="f6d0c1f5c480b503a23d251644c8225ec39f701f4e4cd5a5f985c9be3d4e45497abb5371340411e3d9d4f10a27d6be31a805de17995d02fc83a13f228b923cc7e2337d", 0x43}, {&(0x7f0000000380)="6ac07e902a14af4ff043a7", 0xb}, {&(0x7f0000000400)="9eb7dfc05794af203b4d6cdf45d7760db7bc13d2196d630260cebee61d41228b3988d8f4e0333db36b149bcedeb217e03202", 0x32}, {&(0x7f0000001800)="04bfbe2f538ddd7830301cdcc1966776cad61dd2958fdb3d9cc3bbd8f266b848e9b052682dd7e989ae78de9f8ca3f1544820e2e49e8257e7915c68c661f340e559258ed858a8b96e45e6ec6afb90e0664f7bf72fa365e39ac9aeebd3a98d1ed8dffb9245e5f1b4c4c9e6e28715e3854d978e782bd133ebcdb1ff87c86d49433ec968d570dab99917cb55f65f38e0a177763171dd3516186ec7ff6c6d2405079f4f4bf62ba019cc9568b29f13d4e387645cf6b1c518a96daf72e87de6435dcb8cd2bd5874f9b95a350406aeceff23c2bf416ee0b2ae6e", 0xd6}, {&(0x7f0000001900)="1431298d865c54941789382ca247971bcb35ee9db358bf67fb87268636c22475be26ff7684c6639f2a2dca7c727f1719c34bd347adba22c9f5b36cae05be0287441c2e5d88cd81b912c52216d51cba9a2b41849ddd1c1987af5445a7103bc6c1de05852701ee0cde13d62771529258bb18c8f07904cf81df38f2793681418c914d891e4441b9849d03690f37ae9911efb15f8d6a3a7b8ec16380ff77ce41e9753da0582bef06d3d83bc38350285402ade60146f8be078920bfa422730de6b44d", 0xc0}], 0x9, &(0x7f0000001a80)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18}], 0x48, 0x40011}], 0x1, 0xc0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f00000002c0)=0x5) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000540)={{0x0, 0x5, 0x7, 0x0, 'syz1\x00', 0x800}, 0x0, 0xddab5e9ae4e0cd07, 0x100, r11, 0x9, 0x9, 'syz0\x00', &(0x7f0000000100)=['GPL\x00', 'netdevsim0\x00', '\x00', 'netdevsim0\x00', 'G.|\xe9', 'vmnet1%\x00', 'netdevsim0\x00', 'ppp1\x00', 'netdevsim0\x00'], 0x42, [], [0x0, 0x401, 0x2, 0x3]}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) 21:06:08 executing program 1: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r1 = socket$kcm(0x2b, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 21:06:08 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x5423, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 604.394709][T17121] device lo entered promiscuous mode 21:06:08 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x5450, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:08 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = getpgid(0x0) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/sctp\x00') sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x4004054) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0xdcf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xe1}) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r4 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0) ftruncate(r4, 0x1000000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r4, &(0x7f00000000c0)=0xf18010, 0xeefffdef) 21:06:08 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x5451, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:09 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x5452, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000000)={0x5, {0x2, 0x8, 0x2, 0x5}, {0x6, 0x101, 0x7, 0x1f}, {0x4, 0x5}}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="91a8bdc249c3", @multicast, @void, {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x1, @random="00040100", @empty=0x2000000, @random="4b55f541b343", @local}}}}, 0x0) 21:06:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800005bbbd5fe9e13eb3500", @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000000000007410000004c001800000060696200"/98], 0x68}}, 0x0) 21:06:09 executing program 0: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = memfd_create(&(0x7f0000000080)=']EM\\vmnet0?\'`@{,vmnet1em0us', 0x0) ftruncate(r0, 0x1000000) r1 = socket$isdn_base(0x22, 0x3, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) sendfile(r2, r1, &(0x7f0000000000)=0xf17fff, 0xc07) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) keyctl$get_security(0x11, 0x0, 0x0, 0x0) 21:06:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7, 0x4101) write$midi(r0, &(0x7f0000000d80)="ca2c7c2b9b398bb275855002dfd8b29fa3f6d5b94b777ed855407046a776c954ddc35e97058c5f71068da0799ac0eb357a393bffa211f561a4d6e97a360c47603cef547a80ed590310257a3c305635e8bfed7cf9dfbd4d868306d2ce2e147ef5f04a0b85b58aa0d41e88e5e82262383b06526751b080749be1ccffda25fb35ae79617959b944c73a7b00c76cb92e9052719ed26da733e3705a69717479ba127ab5d68d36bf669780b1f0305e8503b19659c6b2a43a0f4c8e12247f814c775cfb5d43574908bc6e9278aba6a4c9f40b174bc41581b6d9dc86d3812e709620ddebd4bacd8661162f2730103c0a15935973bf122619cf67da042ee92a2163c9e391b59801cbfe2606266709b98499a128cd7e0cb90d792458d0f42e09ee0648e8ea4d3d08c56aab05e912d1ce32a9287540231facd4d4a6e48b610d6078b55e443c5dce3be9e5a457ee1fac600939db2eba6e23a4a19c37d2feecc38a5cbf2d944823af8a08a40e846f1eeab2b6529d008c8fbe69b45d11ada82700942ea885a986aa55f5f17ea4dc0746919b36b0aa7e8beb298c705384744c3d4100acc46bd76560a37f224d0ab1e1a2d94c8fc7ce9290f0d2d978c3bfa097023d1de1d1a861964e388fb63192934d011a8b22430137623fb2f6ed424313ac9aa3f6f3826ef76809f858173b99adeaa4b3e3604ae4336ce1eeaffe2f4414c897279ab89525b65e01ed8e0f66e7f53820100b73b3e1b4a6d1e5dc716649f1f8a941defa2302e62ee0787e76bca2700c7cabb265a9db4786fe3973dd70f4fdf90c96360e4675d74ca17b100e28b1d3dfa8a55c5333d4c14ae56db499ff92079126c40d0fb9d0d8f9e7ea4e3fdb28e947833cc56a3571cc383ff968d58022e6dab08f305a2d1cf2dd4fed556f41bc83b435c77a2fee94ba23c0e6549802740680de2f0bd242f80bbb7b3fa40c5dad878472b87e3103fa549652dc9c5edf9a9134e874a87aa346c383dafb588e036393bf20e7263f4409e468e9b5894037a52d741a00f4b01d78b0b1c4b80baf310a7d8fad6210af2112c06807db65ff4b1f0a075316285d1a5c5ee9426e246e64c6c4c6b9c7861fbc46bc1024b491c91fb276085c9f9158ea0fdd11e9292fe52dd5db69a450e6a8ee2e1932f3f5f935509929448eab1c488587c71b41cbc0d4f4a01b2e0a48a14ca2a0e9965ec794df7603b501c9d2c7c01d166676e2e639b3c006b96e9ae048a7b0e19e5606a0f8c76333f8dd758d2acbb21d5c197547bfd381860bf8ab7fc2da82a25d15fcfcc12a152547e4c196402f8e32d118f1fbcf3a3c5963262d3e3944ae71b27ade1fe1404330ab7447fc143e5e97437746dce4406c640ab01e9a2bfb17a3d3524144b0b59fb10bbabfb416cfc5ed908fbddfa608e513ad7306b637a55b9b049bda50295f33a556bbd1ad0fd51bf877210b86feb20afc00ace19fa5f02cadec4ebc1be7e82e055ec603d6a957c81ddc0a48b46ac35cb2007723e7c1d45922721cc4e01672284182760d9a436816e597232a4b0d35cefd83cef8710b672cb8f4a90af0caef180969b355a501367259feeb84edd7fac76b3bd511d5467ba1d2bd385bbf58a0fcb1fe63b079da6ba997107fcf8417b46ad440758928f2d4a7faa45a53e8252fc77f80178ee28d085059effe900c0aeadbe805f08a1eea74044f7db686a695cfcd44ea89ea3b4df215866a9a642d5ebc692d772fb10c6649b02acf8271afb26562523eba404ef558170980234097b3f1712266418139e40563801050751277a97deb948ba31188799d675780db7f5d870cbb2ac9734fde12cf6f8fc9fda8e5de4d9c30e8218a1a4837f030c74a14aaeb4bc1c47eae2916ed61ad86c5c0d1f4a1688a271a781898df4d0ad437d5d08f487ca6d02fd91d4a657ad74e9efe904b5854d805d6e421ce26c38aa236182f5f2fb6ddcf227bdbc5bd7c2e69239f15b6f7ad3d749875a22d318b7ee4a7618ba48675d81ba2b39621c89ac2c90375c8ba684d9418ce20a670785c6f16e62613bc1ad0e3ad8a602f2e2fa839f04dc625ec80ed91e9cfc351de078a6ac65f9cc05a55d586b3856932e2fed4b4dd713b5cf5c2f0610bedbddcd819670c4444ca308233eb6e4bea39022978fa741f7d1f01c1c817b90727d7c26872373599024b454db402e011c1cadc5637ea50e1359fbcc0a1b7b83071c5878e3da913e7d6a6e2e85243574c4f834c8531eb0a43720cfbc9499d577c8433c4f8dbdaf13c43a467dad9b416fe2dd1afbef37b52a6af87fe2fc3eed361a1dde9f3655ef2f85a25fd4355545585e7768911fbd3b0d95e5200178d3415a3d3f925338ddb5838b1d709d813a9adb5978037778753fd9ba88778fdccc7f74f293df7ff38ae31e6f44f82fe8865d06210402c0d9d31501821d7f002d5243997032f6266a088a724743b9e20b3ec2966fba409cc7fda48a2221ff5605707d4ea63fe449e8c95e433acf653115f9631d79415b0b17f140b66972df0604ab26c86daccc60a79d1ea73af8a29eb9db11caa9145c1366dc2b5eb20a8e1141af8ed6afbfd17cf6bbe54eb4562fd7929ce2ee8e17e2cd13e687996588558474ba582128c9e79a59d3b6c2d830abfec3b6b0399febd17c95c5cea42b1551c1057c549a1a13e5a295b5ad2d2812ee4853c7f189cd4f1bbfbc2d5eebcf5020adb91f1853ea77190d149eb04782372fcec634ff99352fc0f12953b611df883ccaa419dd1c82eb01816c4912734707817c17a7298272946885c7a0ffcd0e4859adb53616ba746310f52d027d3873151361fb9b2f35c12dff420e2cef1cac38af295cdf161c1dc9ed23a57febeef03adc37bd52f22779dfa200c394f5ee8a875b0bb5ef4aefff83b86280def2af18cabea0a302d60f6e60afbf6b3b2c23839d576aad92e9bec6de223c9c1d7881488e00336eaa1ab72d42edf16a41f9cc527a257bf6a8ada1ca5be5746384aadbe6088078c33b9f16c4b8ec7f1a0115aea4d85cc8804f5722a70c0268a0191f5ec8ef6a3d01337d60b6c7e949113ac3c07713eee863cf5af8a625c7ff9a5d6bcc462d7ea5d1ee93ed5c2f4f6c2bd532e76841e3c458abacb7dc717f5ebed8777a5c2605da65f579bfe99de6e0c911737d7bc6fa8dbaf4dd43a041239edbb6c0756f5e2c8f030a8e7521ecf430a26810132d93168c454ce56c755371282fb3a07a2a1cd63053f7ba7f9411315598e559966777cab9043cd7f4bb594fa58bb6a3553372b7438212f57bf3f2448235a5e084bc97dadbf2f69c4632649709b7e5ad73773d7f52a970295969077afa3a30979aa337d405a3dbe8b0f7118cd6bab895249bc7ab3b7569b616f31556fd75a43b045eb51e8523f9f3fcb38129940c38a850a747771693a219f047032f6934cb67d15956f0bbdc900a1d108844e004f689882696fb817546bdd91098f2dbe611e6c1549bb1f3602a0fbcb733b9993fd2981b181430b77b18d53ca3bdfe15248d8c929fbde70b46ba8f93d3df407ca6763e9b905a1f5e55ac8eaa82cc00efcc3a929fd5900bd5ae1b6e68ec3afa18cf52af924a5d61ecc144e62a8c4654aa7bd5d5800256e77a4a31043d6a95a2adaebb68a0adf8f3d2502dbf4a8923df17468b73b1ad8d106c79a8cd79df04e77194a2de5399cff9c677123c6d7421b69536a70259bc1656dc31cf9c4713563b107a162f97d58f7f915896036290a922506bb0a71fbbf6c3512ab049b5aaab77e7cc684353df0d65c197f9f9626d634094df385c2bedfeb214a98d50d0ce693fcb76bd5cb06f598a5f55f75737500e89af220ec2ebf24c12e22a22e87824f61d566080edccd9d514853eff30d475a3b2c39a55813ce364dcc0f6c24b8c48a6269e3e43dc457209eaf83eb41b366bbd2851a76a36b5af7f42732da0a534d05acb9b3d27f6d8cd5445edc43208ba983ba715ee023a17d43e11ba886dfcc29c0b951372e35021b608214d7fc3e0eddb41767bbf1238d4779886aed73d616f8bbcc2bade06f0e31fca1c1367081def56d33599d9a4c60be6b05c4f135c8ea1b0f559e648d7213c768246bac3ec3f206854bbd405c3bc871fa03873ce209abebbe04eae071f05da92633a4564102c4da7ef3dbd8dbced0feba9e958b834403bd6f46d088a8cabc3596d515b94c2d6c9e839637a0c1e57fff8436f2e2b4eb85e58ece54457b7335ea39d87885be049db9d8bf382fa9b953c81e86a387f22fbf465af37cefc42a628845a8b706310c2829f781f5b69a61535ac62c5b78848d13bcea09d2d5830f25d5c9b00b7c9db89c5ddc336a1bd23f94b747f47a617d3eebffe41c4e6f8861d522c14f59cd36daa90708a10c990ff85ffef9d0377f80f67c4cd1bce1ce1fdbdd92e86f6dc5b55e7f43b8c9c9ee560a6d6732bafba3ec5610a1a40fc04ec89470059489d1d8409771ae8059fc5cc2e6723935e0c90ebc829a9c60af26a9f6e746a80037298a17d6b23e28b0785297ac0a367b2dfb3fe219a0b429f50c2506c0086dfe570507ae491b45d8d8993af8cd657e9b039831b3109fa101359dd902bb63d8f67d4b7c42ea148f77b3d40f50ec6ef4566fea238a595e4871573cffb4dff6449e7a9f23268956957a63416f7586e9427367f24fdb3e180fbcf339618b656749f36c21bbedf80314a484fbf3c1b1ce4a96f8d3aeab253becbeb1997229af0c32088f476a548a86453a1056f4c79c2f0c708d5ec6f2ee9f346a7284f0d7d44f809ca85423c0345c371e57d758728b36d5860fa148cf09ab85ef717c9b6dc49642ab90963fc478ff945c166ea0726a11b4e7b03258b80cc03168d1902b91c502d3bc49b7c54dcb5f4fb3c76b18cc832ec0306a249c612ecf6d0a535d59c2a6de06d83d646bc1c00e0ee88293a771667f7473c3483ad098642a9a763d27ac0b94cea206b0d7f5a51625edbe75fa14cb2c5ddb7eb92e86eed5d394629345ffae969527fbc52c264e34dd3b4c2f17ce85ddb0e2340622672946c5dc4aebe93a31bc801889213f7d48dc9ca5f393fa460a65eb7fe64ed5a672dd91e2f8ca7766f79b08230e7e91b249df14abf7e1432b7d772ab8ac173a9914d0e039b6001a1f2a2475b4289390d21a1796b560281f512a2f16acf821d8b0d4f04641f12d5a6798600085928b3f006b6687b8598c4fdb027bde3625f1137eb077e4b0aa85f601488cd203407e68336214c9d3746ba024f1c3fba3f3c938bcc917310b95968bf3a916172f9d2fdafae0718736d441b463300d10c0d4e151c2d262b31da8d15c3be26b14fe459b89d14147e58497d2000e1f45c9ae6b146c598f4177d413676ce15b732c950508d105382cfe830cb52bf20ae411c3233aa845c6025ed3487236d7d6f2dc08e73cb46b836f1f9e7585e4b69fb05784b0bbd4501deaded242cc96b5a9e35b68cb6391c0ba025545b6071a64d4ebf1770d3208eb1191516be7f6952222c116a558cf3dc3efa94a447a2675a1096d98dca7786fceeb2ad489eec1b384b9732282cdb30ed1b4e894cb3de4ef0b36e2f6f8584037653b58253951ccb6fee735846e7e8f469e04f6b2f5079f4d923155fd5f62077057d2967e3c58644275737160a4f8168a6c18003689e3ed0816297e9d26d0e6ffe3a66561f9b370af78fa72b9a15713a5c9c266bfca8b4844c64d9752c5309e54959272afb715c364c510f2011366316138b9def53f402b34ef101ba397b9a169ffd4a53751e16678d1d011bd4e278efc6954d4ebe166efe49c574b669f51220c4dd0ae0a96dc9d31ef4b6e525e", 0x1000) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80100, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xd5db, 0x7}, 0xc) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40), 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, 0x0) 21:06:10 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x5460, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:09 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x2000) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x87, 0x7, 0x8, 0x0, 0x0, 0x2000, 0x10030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x48824, 0x80000, 0x0, 0x0, 0x400000009, 0x0, 0x200}, 0x0, 0x400, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xa, &(0x7f0000000880)=[{&(0x7f0000000280)="67cfa0753917c80104bcb9733cf7fe2ad35252fa96455f5d80f3f88afce9332d1a370520bef8dcd2ed8b4d55d42024c18fd7142e7100405cb5c2aa66d489cf284d245cd11e327f551b5886236fdb5f2f915897867b933d3e895e550f36473dd351cec1c660f85d084a35aebc1de230a6f31a3dfa378d9e", 0x77, 0x200}, {&(0x7f0000000100)="8f447e248003b57b6c955799b93143b4f53467cab24b245b46173b0cae670c8f7b87437f8f7e0169dd16dc6a7772d15d96e905a2b05b86887f", 0x39, 0xfffffffffffffff9}, {&(0x7f0000000340)="521bd13b04938a6417ea9fefaac73031297924c708673acd8671e59faee2ab295ccfb7c213b4e221f3e8b572649f67295d4aec167ec7ef9c8e7913e48bde860931cd3d8c326f8fce6f8385a04e1144530905d4c8440de2bb01e5e45ab929cf646effd2a9db7d8a05c0a28408e201fdd1bd0aeb3f940ea40f070f769c563316", 0x7f, 0x1}, {&(0x7f00000003c0)="83f30f148b09fafb8d7c1130c46b2a512496145589fcc2b6a63a726e0bc4e2c41a4c215be6d5c133559fcd06700b94f5ccc155b9e57f834e8460af70555d5d3394e84e3afe0bbcb0475f58478efc428750c653e906", 0x55, 0xffffffffffffffc5}, {&(0x7f0000000440)="189de56927bcde44d4dc6f090265dd554864b281e76946b319653b0cbb8ba85b995be42e56e3bfa2118e24f28b9b47206ebc46b1c377e7504b85f2a2e3b314e29ce445a7165b26a6dc0e5e86d5a85e9f0e39c7cf2ae5a1d1572c63fe4e8da35d324fc4a94ac834c7397fe48e74cb2de0d664e1b4a7aba3933b12f33dc430276c18f03f7602ba4b6ce98352dc17a952e3c04d4d4368b261", 0x97, 0x8}, {&(0x7f0000000500)="f0851e2b2e4fd24f58e35e6cb4d3672e5895ccbd813b59ace44f72625d1c8669dc342b56e14f889181faed89f98c6c0550233f450d45ab57cf09ee4d8da5eec569e866e3580eaa8d05a344de5c74dee1569dbae95692b40f88dae4fd6cbb2a66c17c97a3a84c7758e2bac576e520ef6b2a25d6a2fb3b785e041c1825aa30cf625e3b5e939a603d054b77590d7f7907f21947fc50d02230500dbcdb", 0x9b, 0x7}, {&(0x7f00000005c0)="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", 0xfd, 0x8}, {&(0x7f00000006c0)="213b0dbd033afa1a31134d", 0xb, 0x9}, {&(0x7f0000000700)="148eb78da9a9f0552e17d6244d233d9209980fa4609808e3bb6fc4bb6d370c805572d86afad1f5495a8284cae00d9ee297ae87aeab5e9aa7d03e7db0ec3f433ce7a1f0b6101f21766fd573eb8d8c0c8148463c7799b6caf179cb408db16b1b9aad6e2c705c8e79f1054c0639640470987e14b74ef6124e3dd4372c054fd4b0638e36098703319218bbc6d9565d5a81804e352e1c2d0fa2b1faa11afc896e622a596eb3a9219d", 0xa6, 0x401}, {&(0x7f00000007c0)="dc2b42a66f45d9de27a90c69a2e95217030d7ce6c47d95055bcabb69817d3f8f576e08225b8d55597cd78d334c676faef2580e84ff5de2770ac45d37602d92e14c60cd78572e9ad126020b363276541aa915f1bb6ff62480f38fe5c9f5afa5938660da049dae98151a7a04bad260c58141ae21bdb9d530fb661e19025f1caa3c58f7af7f58e401c40e9056d355ed115eac9e73505a51c26a39a46c19cf4e37bcec66ece1aa117db620b0adb96f6c4151d0b47e9dd219", 0xb6, 0x20}], 0x4800, &(0x7f0000000980)={[{@flock_openafs='flock=openafs'}, {@autocell='autocell'}], [{@dont_appraise='dont_appraise'}, {@smackfshat={'smackfshat', 0x3d, 'memory.events\x00'}}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) 21:06:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, &(0x7f0000000000)={0x8, 0x3, 0x9, 0x3}) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x81ffffff}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) [ 606.389018][T17175] device sit1 entered promiscuous mode [ 606.403833][T17171] kAFS: unparsable volume name 21:06:10 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x35}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) socket$isdn_base(0x22, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000140), 0x0, 0x20000000) 21:06:10 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast=[0x11], @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @multicast2}, @timestamp_reply}}}}, 0x0) 21:06:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="cf362c5710e51fff0000002b618ce200000000006fabe5adc97e35b1ed6082a94fc9288c37bc42d61cfe4fde31e27bd4ecdf95cd093caecef936597884d6", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e000000000000000000"], 0x40}}, 0x0) 21:06:10 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x6364, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:10 executing program 3: setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000140)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000011000700ee00"/20, @ANYRES32=r6, @ANYBLOB="00000000000000000000f1ff0c0001d8510870d00acfa5779754007533320007000000d0455083cf"], 0x30}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x7fff, 0x80200) 21:06:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000031c0)={0x0, 0xf00, &(0x7f0000003180)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) [ 606.898817][T17194] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 21:06:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4000) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40004802}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x10c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff87e}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffb}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa95}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004010}, 0x8000) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x44, r3, 0x200, 0x70bd2c, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008040}, 0x4010) r4 = dup3(r2, 0xffffffffffffffff, 0x0) r5 = socket(0x11, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r5, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$IMGETVERSION(r5, 0x80044942, &(0x7f00000005c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x0) dup(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000040)) write$P9_RWALK(r8, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r9 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x4, 0xfffffff6, 0x0, 0x200c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x22, 0x7}, 0x0, 0x0, 0x5c, 0x3}, r9, 0x4, 0xffffffffffffffff, 0x0) dup2(r8, r10) [ 607.087359][T17200] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:06:11 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x8904, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:11 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000080)={0x98, 0x0, &(0x7f0000000100)="92cb81823f8c982c98c0fcbd637954ad991d44dd3752c3cac3392a7856879bf2aa2c576e6030786d916d333914cf3f4959cac8dd5e09235077a846411ddaa8501fb4206f5fdca072cea196335313e8fcda2cffb11d30aa", {0x1, 0xb5, 0x31435641, 0x8, 0x7, 0x6, 0x4, 0x4c1}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0xa4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x103c, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) 21:06:11 executing program 0: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xffff}, 0x3c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0xcf80, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x41, &(0x7f0000000080), &(0x7f00000000c0)=0x4) dup2(r1, r0) 21:06:11 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x8912, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) socket(0x10, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x10) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) gettid() getuid() socket(0x0, 0x2, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) clone3(0x0, 0x0) r4 = socket(0x3, 0x800, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) keyctl$chown(0x4, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) dup(0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x84, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 21:06:11 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x8933, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:11 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r5, r0) accept$unix(r6, 0x0, &(0x7f0000000140)) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) bind$packet(r2, &(0x7f00000003c0)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @random="dd9a7cabdfce"}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000001c0)=0x1, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r7, 0x628, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4}, @NL80211_STA_WME_MAX_SP={0x1f, 0x2, "371fb74bbba76675bb66b1f97caae6f9b6200b42c51c5ed06d558f"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x4}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}]}, 0x4c}}, 0x40c0) io_setup(0x1, &(0x7f0000000380)=0x0) r9 = shmget(0x1, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT(r9, 0xd, &(0x7f0000000680)=""/134) shmctl$IPC_INFO(r9, 0x3, &(0x7f0000000440)=""/4096) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000080)={0x0, 0x4}) io_submit(r8, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r2, &(0x7f0000000080), 0x101b2}]) 21:06:12 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r1) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r6, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r6}, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r8, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r12, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r12}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000340)={r12, 0x4}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={r13, 0xfffffff9}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r14, 0x6}, &(0x7f0000000240)=0x8) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000002400e50d000000000000000000001a00", @ANYRES32=r15, @ANYBLOB="00000000ffffffff0000000008000100686866000c0008"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) 21:06:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b0b, &(0x7f0000000180)='wlaF0\x00\xa9v\xde\x83\t\xfef\xf5\xa1\xc5\x8f\xeeCw\xf8\xd9\xab\x16\x81\xd8\x13\x11F\x95\xec+\x00'/44) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) 21:06:12 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x8934, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'ip6gre0\x00', {0x2, 0x4e21, @multicast1}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={@remote={[], 0x2}, 0x3, 'team_slave_1\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x16, 0x0, 0x40001, 0x1, 0x0, 0x1}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "95aac023a4b51638", "a3c31e77cd4983be1478ed5a77189445655c57971c3efbda277b5a81b37eda43", "cf220de5", "1e05c9f676f1b98d"}, 0x38) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, 0x0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x18) close(0xffffffffffffffff) 21:06:12 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r1, 0x2, 0x70bd28, 0x8a, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x73}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x10) getpid() perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x40100, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)={0x29c7}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}}}, 0xb8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000380)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000400)={r7, @in6={{0xa, 0x4e22, 0x40, @remote, 0x7}}, 0x55, 0x3, 0x0, 0x8a77, 0x5}, &(0x7f00000004c0)=0x98) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) 21:06:12 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xab00, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:12 executing program 3: mq_unlink(&(0x7f0000000140)='\xf2\x00') syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00000000340000000000000001a58d0001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xa0}, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 609.110035][T17267] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 609.279469][T17267] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 609.336879][T17270] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 609.384373][T17270] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 609.394432][T17270] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 609.424486][T17270] EXT4-fs (loop3): corrupt root inode, run e2fsck 21:06:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$SEG6(0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000640)=ANY=[@ANYBLOB="06000700180066e9b6e02914e0e4464900000000000000f4ea3afca22997d549ddf63854c1ee870668f87b80accf3d54481704bc560e1e010a99dce7847885c56a16287003"]) umount2(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x20601, 0x0) r3 = request_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000280)='[vboxnet1}.eth1selinuxwlan1)@\x00', 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000440)={0xa00000, 0x8, 0x3cd18088, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x990a69, 0xac49, [], @p_u8=&(0x7f0000000200)=0x20}}) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ocfs2_control\x00', 0xb0101, 0x0) statx(r7, &(0x7f0000000000)='./file0\x00', 0x4000, 0x4, &(0x7f0000000300)) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0xfffffffffffffffb) openat$audio1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x10002, 0x0) keyctl$reject(0x13, r3, 0x8, 0xff, r4) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f00000001c0)=0x1) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000500) [ 609.431453][T17270] EXT4-fs (loop3): mount failed 21:06:13 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x10001]}, &(0x7f0000000040), 0x8) r1 = syz_open_dev$audion(&(0x7f0000000580)='/dev/audio#\x00', 0x3, 0x42) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000005c0), &(0x7f0000000600)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x30d, 0x1f4}, 0x9c) 21:06:13 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xab03, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x67, @local, 0x4e24, 0x3, 'sed\x00', 0x20, 0x7f, 0x5e}, 0x2c) close(r0) r3 = socket$inet6(0xa, 0x100000000802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000340)="ff020400"/24, 0x18) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="0000000000000000000000ec00"}, 0x1c) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0xa0, 0x900) 21:06:13 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xab07, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:13 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaaf1bb826000040dc", 0xa, 0x8000000000000}], 0x4802, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2402, 0x0) socket$netlink(0x10, 0x3, 0xa) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000100)) [ 610.279929][T17310] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) 21:06:14 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x0, r2}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="75d43a1df93273eb3b486b3de3d4923bc3c516dcf6a42f90ca35fe33027c5f2a460b27f63b44c9b684bb6bdc6de941272757e04c8122b60a6240ee35a08ab382bb734e", 0x43, 0x8000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000200)=""/222, 0xde, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000)='\f', 0x1, 0x24048082, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="dd", 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 21:06:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000008004000000000063110800000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:06:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'gre0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKPG(r3, 0x1269, &(0x7f00000000c0)={0x6, 0x200, 0xbc, &(0x7f0000000280)="df617e14c32d799332a3a2a9a4dca8b577d7db1c6b00fca25420a72b659f27bf9ef9f990116b7e3c757be6b41907cee447be0c3c68897faa9198c1c8466efe137003b8011265a7b24faa54fcf766de164eaf54d55e2f10f60aeb6b68b95b7eb4d1600a6d604bbca528285511ea6d777318f3055d44c9be2c7f9659339777bdce916d050139c5b8e014927fc28735acd3f48849f3570370b82cda2f4d7384613b4a3fffc6bd2bf80ed1e0e910366fd844a0823393887f36136eb77948"}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000450000240000000000219078ac1e0001ac1414aa000000000401907804f426e600323700"], 0xfdef) recvfrom$inet(0xffffffffffffffff, &(0x7f00000001c0)=""/168, 0xa8, 0x0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 21:06:14 executing program 3: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1b40dc000040dc", 0xff0f}], 0xc102, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000140), &(0x7f00000001c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, &(0x7f00000000c0)={0x5, 0x200, 0xfff8}) fcntl$getflags(r4, 0x408) 21:06:14 executing program 1: unshare(0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x2) semget$private(0x0, 0x0, 0x0) getpid() r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) semop(0x0, &(0x7f0000000100)=[{0x0, 0x9}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) flistxattr(r1, &(0x7f00000047c0)=""/13, 0xd) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000300)=""/135) mq_timedsend(0xffffffffffffffff, &(0x7f0000001080)="7e854fb94c5e604ff57e510d99672bb84674144b9e92b93e3c7da9b826ac23477d337b3c394ca8f948954a480263c3", 0x2f, 0x2, &(0x7f0000000000)) creat(0x0, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000009c0)={{0x8, 0x90}, {0x4}, 0x1f, 0x0, 0x20}) sendmmsg$sock(r3, &(0x7f0000000900)=[{{&(0x7f0000000140)=@llc={0x1a, 0x204, 0x0, 0x5, 0xfe, 0xf8}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001100)}], 0x1, &(0x7f0000000240)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x1d}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}], 0x90}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)="55dbb02cfa2759f2013bfc7ccab12f9af156ecafcad7336c87c2c74efffba04fbaceb577dd3833fd837cbe586af98250bfd8643014c2e743aa6ccb4c3006e6d1e86ba7e32f744afd795f5e3b", 0x4c}, {&(0x7f0000002100)="0d934488a250add6c2e4a0956c68045b68c6d55b0bda4606db66f0071dea17a004b5a3112f7a21ba5419da3f3bd7ab87b7c56e4dd0042fbc969c80cd43651fff6fd1f424ce39a0f57620434199e9510a6684b36b9d0a6f322d06803d9746ba7c9092b9ea973efd99021fb7549fd645eea8d0cf86f938b272e495804e92d5874fc38bea2389f1c604a0ae669facbbce7efd16ca7d51be21517ee99c900c2a3ab8977046ca41bd6f64075256a2f4117584adc2f70ab135acd635fef8fc693d37e82e5c4d32321a5505d83c44ae8c41047e1e76034cb2a70b63945105fb06196bab978f72ce1428f9110dbf8d2e0fe8fd5f952b05afcecf8524bb4a1ec0c9d6fc5aa496eac6a8f687bc5f951559c076104602be90ac15b5d803244d4f8bc5212581a7ade7e3be9722c2f5f353b2b63ed397eed91d59b958f0f3b3931aa44be8e65c5b7cc449e8423e4211e9a20689399914dc1ea7c855c468521c350c1b97028e9a685d88081eff88517c78e9be1028481d148a10bf5dce1cefe3e5327b9f1ef42e66e5b34e6c824ddfc224dfaaef48138897d63f0b8558708595b29e22e8bd40efc9e5bad1a302d1453897f78b9cda816d469e11caf5117ff1bee029f70de7ad2730fce75e16a230bf33d1a717a427309c381399affcb69a47e274c98a742e260f2957519c0c3de0ed9107a6e0ac321493058991aeca90f2ab40a8b1e41abfb3d59302b2c8771dcf80c40a04ec7641b4348da11a66850061803fb055edbef18bd32d4669fd7861e6dfe9f635bb33a85099cba5274642f90acb756b203f5096d9df9f9204d5de36460abfc954414ce71f6d081e6e36ab6b3ccee74fec9e3a4f9ca7a821a74919029a2b37bdcb78849b5ef7603eb893e2640664b86d8006a928c94cd2b89c40397f887108bd256e524aa5acf4d43383529c3fe37c42f223100e48835a8bfa0d45264ee7a5d8f3380c39c7a7747d5057dc1334fe4cb9d58fd257571200ff88a908f3aa81107635c9ce53d556f7ff82e096c9151454b31f39ec2c76f328233723a0c3ba3af54814754643ad2426f4d4a35a2e8f5fd72e97b30be7ebab044b54d26b3af5fafd964ba6f58f4460988a0d63fd23f4047fbd066e2aae29e390dad44c81da0539bc835ee12fc36fa94930931ba483c47a30eef13bd49f53e8293e733b6e3b0b188b039a30274ef56f0aa542d3a5635a0154de8a1d184941c403f2e4172d33279c64fca9ac154a959f6538cdbcfff205bf788649909aaa1c05a54721772b0526fb580b1f37457cc0b826ef1255992a723c042361715738a70129b81d1bc691de50cc1e497b5da92325a101544fd1ad796a1cb2f48a3b9ad43004fc856e576465b1773678e6b81a746b9c10bfe67725e28d6743f1d5e8c2813b3bab4eee63e4a8d839345e0e8100b40dca672fbd7c114850ed946bfc3386327609e0c578a62b74c8f6ceb9348e8d54314a151549e4eb2cb3db278d588da3b7745c7fe823062de227d626d4ab955a4a61f72a8ad1031b22e8ae860ed31055d399009bcca05984705582d7cf9e6ee9335871baed3ecc61e64bc13ce8b5f0da238971bd6db9f174e41f0c58ca005ecc7ecf651d5969178eb4674cb9ea679da01ec2e5cf36451de5d1eeb6ad417c38ea43e8aacc8d647136d09c67784a70cd1e5c5f4b2bc5f08ce03432065864ae5876a6af1f98eec986035fc69fb8bd83cbf950cb46484b6e526cd8b027e72a79259992356ebd8f68d25dc81d1ef73d210f816746243851f865ff96ea4b8cb243208d6e76106f2fa08aa2c7241b2b586e1dc9830e99c57574e3caf8ee28e0cc7736fb2da7f45938a18bda2ac081cc5d8b8be59f5431d2bf1e3d8e6d3d2910f05bab63f9af74df5f7fed1c4237dbf55fc1d70b4e72852e4e2a95bd561730c2fc5416bd79f98dd53e27cee8e34784198ada855a9437a4c68d5978c25be4e20ce2de45343bbb147f216adde57963dd12c6f5ae87af0faa3a6ada441dc870eaab9b192a0d4a67f279eadbc8e26001dda8e9161b8cd26d271e08fc9f7c4f5c9f01a972bec38e67058dfe6a54e6e2881090767cf79a3ba9a204af1bfdaea0c3c24865d2ce6098b60413044b60572c50367078c523429f377d9034bb6ef85920283e2f829ecf398e36368eeb23d73c9b0eadfd097cc78f972e2d8af53169f2944364a7b51840ee2410ed1447215d3415a01d6b07120b2c31a379c78f06f08ca2f6f9b215a6ff513b65f0b936431f1cd4811ae5d81e2d9f355ac2cec36396f47b6b3904e1c18c1919dab4ebcb3cdd0e43ab9bbf2fda493483d9524ee55343b0da153d4e1867da8bde4dba107145a575370b70657081fca9983bfca32798c00c4f8ab1be5b4ff9e9a639340b6df6660577f6f87eab6efda64a03bf19445f3938e2d9ac4657ff4ee54428155cd55d86c8109888b6994de24c00247247f0de3806eee0db91d4497569a0c7fb6ec6aab115ed7dacb00272ec237e863a5922313146e2fe78ecb0af672b4a040bf4a5f23f94c09973aefca1fa2f84b9fb271acc580a42f4725b56802277ae301df711f9912f924d00e872ae690c346d5c5c67b4fa0d5bfccb9690a1a4409bee33e29aecce0eab99331bc1960e467573b7e91e36da0a6761335e05668da4afa4896358652bba0fa7c4a821ab449ab2de4f29cf9534cc36237812f52b08f028dc11f4d9bf7e0332a773c9d9fe072ebdb10cd84d00b2e29f47fccc11d37bac1e779b7c9043daf7e745ea7295679e6b6fd5885ea02b4c7e3539f24c9468e8f6332041e7e82c4381bcfc6387ccb19386890bb56ed597b96aaa1c7b66fccd889e607f46dd24d5589ce301a7d03f5cf98413db32d6b2e47221009818c5db0fbc5416f7701621049133248be78e083d82d452680d079422419b34c142e56dc02f623412b8667b01aee01bd26aef52f0bbcc19b3df39f4bf9955f1dbb2d2b7d34720104871a7bcbee14b43cc7490bad340dcbe2b23ee509345ef36e9c9b6b991d09c7cab02a20cf6727518145f3ddacdf524d2dd2f7f95c258bffe744f79c0629969aba0f3974b2cca496c548f802401573a93a2a4a0faca4c20f92b5a886fd8504294ad6a421c6d1c8763b92cd4ea3e73b006e0455ee0263856632049cb342181b74624c1539a7e398f2ad0f92227de9c6cd0866e273b2bdd1e96f94a7cefa63d72d3431b27b37b0df0751a81ebe8f87720d95d226d75e5e1a72795bf02203845a0be48e7a0cc19e9ea18f817c434d9b60757d611b5765b3c740cd0d13f8d5722c7fd68c5e3651aea5133bc78db32500c2f87a659a845b4079cc1f6633e39c85a5c931521a5e3a5d587d29e8bb445a4f6c6a64ba194d8ee05c349bcb8254021fe8ae1c920c9e18f280588a998c557b4c0555578d31c6f6501b46a8b6fb5bdfc44a455f0d5407826f2ea0cfe5dc1282a6eced607fc5a4b453a264638ea1f21c841f329c7843f8dc9d9f7ba2d471c1f7d1fc5b64b978979f77784e99717323b77e3225590449ec30be148fe27c96b7678bc3496964d90e9cf4b70b3a2e3ee4d30cec548e17a48e6b92e0fc50ac3237bf6d5fb24df1c6827665dac3872e692bf63a5959874d9b3b150ddc9ec1108546abfa4b47546a688cc18971f230a45ac2c1dd0e92799bdf9e1b9dcf97170589ef120ddacd2b3d69b7a1f85946daf2375a9baef6cafcd837e7d9d51eb9e68c7a39a324c6e37c6ebd38a56c7d51feb6367c402f90cbe1761c3986a22294f314ac162c3f651f3eed1b4eb222a5cc7cb8e06858716f4670ddf4e1d1d451c87d47ac2a679c85d583429c9ff127be4c5bed11494704a7f1748aeb9192c917ef2bac9a4f261a5001e4cb5d5d2d3b80fe183e301adef1a9c71b8eea480eb6d909848d5f1ff319cb600840fd9611bcadfbc4da189cd10e168d4892d98bdb318b8c4422307efa56a6267ed82751333d9283b1f9232fccb3969a88f2239d644edc1656546d1d13214ab76ddd3b9d9eaa641ea36dc3c76eb77ebd9369a410706a8c2f01d2d6d8ac989a06f96c0f824bed873f2bbed47442e93b1efeeda8a168810fbafef9a0b6e21dbc9cad13bf9635f4578815d6be8dce0d20bb61f66b8ed7340dfcd37af98407a0950e2cfccd71fd5df2efa2170d718858bf3b9b8d137cfd5735e1940a7c15692b79d9bc0b6240325ba0713eb13b48a00d55c7279da0d6fd49a4e82517317b88b36f0cab9dc87a81ef0db3aabe009c6f1eb86ca3f159764fbd941b979483bb66d446f1444d45d0981a0d71b08fd92ed43d6f1a6d5c488ff5306d7de190fc9b33cdeb86fd1e479def7d95ef0af6244d031989329eb2c103eec2a9355823bb1b01c91efb440189c304dc8d6597d978248b4556a3cba7c96c5bb32a469b3a153b533200d8126c7831152765c65d30c7b9d588ed282eadea7b253ce9e7db5df683d1a2ab7910c5702f07434486d95825a6f13b6733da484ec494028318989b2d6a7809548525da733d0849364ea13e3dcb5106331eaa0c8ad91fbce509e52bf61f8f6315ea68f544c56546ae10d3cb5507b45ff666b1f3f33c255115870da8eaee6d76f0d225d4d646337aaba3ae6b83719b197f4072c7d75f2ca47400c846c43cdbc42df759bf400b98f58a10d487fcec3cc61ac7df493f27b4e9d28ab96cba40cb6a02e25d09fc49b7b37cb95b02ea339febbf6001e8bfda66f75cb19b95455a67532b7e0dfc0ffe3f7fc0b163884e9a1cbb803a7a3e498889dde611f2e6f96b3e56a55ef4b93ddb28f9beff20a3c6f63979bf597afbf8436290a3b9e88dbfb2007bbf5bf0460f2da8b7b09be0fe8dc347683d246b3452d46de369aadb367538c84be2c50105d5ed6ef82126766c628c21e6b6e7fec9fae397946838118806da63eb0d3c8ab99ed6c696ec10c8c9904908ba7214c811a6bd5674f19d0a8482371560ec938a618a29207cd92b6dcc26a8eb9e2252c89153ad8a41777f1ea7ef9b122027ac3d4049c4ad2f841617d5b85c858affb9746d3c3d62cee71e2b409d6617a6afd6d331997173656b013be4a55a5e11213a7ffdd0e9935caba1c08c7e72e70ee86afdda6331b974aaf76fac31a4692fcfcf7f57625fabd39b5855f743a56e63acd477c01ed1a2874fa691dc15dda89d6112ab4d49330b966790901d4f0ab424f0ac67b289d7c1088faeb01ccac2db99be4e1ec159fde051ed18cfac199f8c56638135f50757b0eb590184536b008e1eefbe6cda722190994ebc509ba7b5ce22bed954670b000b0d6ac578d931dc6341133bea7534b403a07eb77ebf4d71eba43382da3830be009b0bcaf5202b73728ca4c6dbc9261e3bb39571b68b269eb24013483d3bce6bf6b09028ad4c634091554ed1a8c8195971922979420df547cf9b7568bec932918400efcae9705851c60e0d51cac67dbec288fc78b", 0xef8}, {&(0x7f0000000540)="e2b9ba45a34d0cfbea0f391bbe872f3ce65dbbe1ef20cef2039b4028cab7c99d6af6a438d4906905ea868409b86baecc5ca4c440fa07db8fb171b5ffecda7286b2926864dedb8a66af258e5ffcbfd812a6da23a104f21ed47eddede82ecf85946758a2529d78599c051e5c68703ac7e7b6d09097957e4a39489f7e108adde412008653d9f180e4b5736c8461921b0ddb13192e0188", 0x95}, {&(0x7f0000000640)="a85bb0387241240831a7aef29fa57797d50e9632b51b11d6ad56b7f81fec43bdef7b6eeea8ef5f46b5b654d80758895bb44c4d60b68d8d3958b3e4e5fea1dd0ff54b94c60c6a", 0x46}, {&(0x7f0000004800)="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", 0xffc}], 0x5, &(0x7f0000000a40)=[@mark={{0x14, 0x1, 0x24, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0xc0}}], 0x2, 0x801) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0x8d761e3f, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x4000000000000d0, 0x0) [ 610.992022][T17333] BFS-fs: bfs_fill_super(): Impossible last inode number 874 > 513 on loop3 21:06:14 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xae01, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 611.180538][T17333] BFS-fs: bfs_fill_super(): Impossible last inode number 874 > 513 on loop3 21:06:15 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002640)={0x30, 0x1410, 0x1, 0x70bd25, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x30}}, 0x0) 21:06:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x4, 0x101000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000800024001280110001006272696467655f736c617665020000cd7f734d7fd1b8f10000000000"], 0x44}}, 0x0) 21:06:15 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xae41, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:15 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc020660b, &(0x7f0000000040)) [ 611.520170][T17361] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 611.657508][T17367] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 21:06:15 executing program 3: r0 = eventfd2(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1406, 0x200, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}}, 0x10) r7 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(r7, 0x208200) r8 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000005e40)='tasks\x00', 0x2, 0x0) getresgid(&(0x7f0000003180), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB='8'], 0x1}}, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffa) 21:06:15 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xaf02, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000100)={0x0, 0xffffff80, 0xfe0, &(0x7f0000000040)=0x588926e6}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="036a780000000000000001"], 0x3}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x2000, 0x0) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) [ 611.978096][ T27] audit: type=1804 audit(1583528775.846:2415): pid=17380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/226/bus" dev="sda1" ino=16785 res=1 21:06:15 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1}, 0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) r1 = dup(0xffffffffffffffff) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) dup(0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r11 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r14}) [ 612.079360][ T27] audit: type=1804 audit(1583528775.866:2416): pid=17380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/226/bus" dev="sda1" ino=16785 res=1 [ 612.177379][ T27] audit: type=1804 audit(1583528775.896:2417): pid=17380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/226/bus" dev="sda1" ino=16785 res=1 21:06:16 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40045431, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:16 executing program 0: getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000285ffc0023848e038254d26efad191855cab3bad3993d6098deae65bbc998db91e00b591024d1d197c256dce4fb0753a6756f2ff1b5c9dc5e391f9da1395a41787ad0603a8642d690c992023", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x9, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) [ 612.413570][ T27] audit: type=1804 audit(1583528776.286:2418): pid=17391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/226/bus" dev="sda1" ino=16785 res=1 [ 612.539755][ T27] audit: type=1804 audit(1583528776.326:2419): pid=17380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/226/bus" dev="sda1" ino=16785 res=1 21:06:16 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x400454ca, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x301000, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x7, 0x5, 0x4, 0x2a, 0x0, 0x2, 0xa00, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7ff}, 0x2cc, 0x2, 0x3b9, 0x7, 0x3f, 0x9, 0x8}, r1, 0x10, 0xffffffffffffffff, 0x8) recvfrom$ax25(r0, &(0x7f0000000040)=""/35, 0x23, 0x3, &(0x7f0000000080)={{0x3, @null, 0x1}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) tkill(r1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000340)) r5 = dup(r2) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000001c0)={0x0, 0x20, 0x1, &(0x7f0000000100)=0x1ff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000240)=""/237) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x100000e, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) [ 612.696927][ T27] audit: type=1804 audit(1583528776.346:2420): pid=17380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/226/bus" dev="sda1" ino=16785 res=1 21:06:16 executing program 0: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) gettid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) setpriority(0x2, r1, 0x2) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 21:06:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x2000005) pipe2$9p(&(0x7f0000000240), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x4a0040, 0x0) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000180)={[0x1000, 0xd000, 0x100000, 0x4000], 0x81, 0x8, 0x4}) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000080)=0x7fff, &(0x7f0000000140)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe83, 0x11, 0x0, 0x27) 21:06:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = dup3(r3, r2, 0x0) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) capget(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x81, 0x7, 0xa6, 0x2}) 21:06:17 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) bind(r2, &(0x7f0000000080)=@ll={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x80) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5}, {0x3}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', r7}) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r10, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r10}, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000002c0)={r10, 0x7fff}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}]}, 0x34}}, 0x0) [ 613.357896][T17416] ubi0: detaching mtd0 [ 613.431084][T17416] ubi0: mtd0 is detached [ 613.538776][T17420] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 21:06:17 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40049409, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:17 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x3f, 0x6d, 0x2, 0x0, 0x0, 0x0, [], 0x0, r0, 0x0, 0x0, 0x3}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000480), &(0x7f00000000c0)}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000001c0)={0x81, 0x7, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x400000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc00f6f4", @ANYRES16=r4, @ANYBLOB="000200020000fddbdf25140000002c00090008000100ffffffff0800010009000000080001000600000008000100080000000800020046af0000340007000800010001000000081001000000008008000100934e00000c00049b0a6b92276b8a81459c4c6eb9530000000000010000000c00040001000000000000004400090008000100010400000800010000000080080002000500000008000200870000000800010000000000080002007f000000080002000900000008020200090000000c000900080001003d0a000008000600040002008c2f98bf6d51868e0b23cd1494c4580dd20e70fca9d05737745488"], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f00000002c0)={@fixed={[], 0x11}, 0x8001, 0x0, 0x85, 0x400, 0xfff, "029c45dda62f33168d5db7d8941a7554efccb191663a0fd4aa129416e48c138864dee04f29101a7b871691981dcb767dd7296c52d9faf00511dece095a7c16d600b0a36765d2738da83946b90b9c5b9da1ebf5b7c4feeb78823001a3ebb43507afc965f401cde4f979e90691463f76dd8a7a79b35faa24807bedb53d34b50dd0"}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x800000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r8, 0x0, 0x0, 0x4000000, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000b55000)={0x2, 0x2, @broadcast}, 0x10) ioctl$sock_FIOSETOWN(r9, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) ioctl$int_in(r9, 0x5452, &(0x7f00000000c0)=0x100000000000006) sendto$inet(r9, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self\x00', 0x280002, 0x0) sendto(r9, &(0x7f0000000100)="16", 0x100000, 0x8055, 0x0, 0x0) 21:06:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) bind(r4, &(0x7f0000000080)=@ll={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x80) getsockname$packet(r4, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x2c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}, @TCA_U32_SEL={0x14}]}}]}, 0x58}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="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", 0xfb, 0x800, &(0x7f0000000200)={0x11, 0x1b, r9, 0x1, 0x2, 0x6, @random="6f25a8a88ef4"}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x275c, @none}, 0xe) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x7, 0x4) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') 21:06:18 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186366, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x200) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00', {0x400}}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 21:06:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x40000000015, 0x805, 0x0) accept4$netrom(r1, &(0x7f0000000000)={{0x3, @default}, [@default, @netrom, @null, @netrom, @bcast, @default, @rose, @null]}, &(0x7f0000000100)=0x48, 0x80800) accept4$inet(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010000104000000000000000000000000b2a1d8c010a5814beac40cb941f520d60cf364cc05b34bcea38caf7561a58447eb4c8a68c52485beb9070670afc1477e6e943564529cd618bd93f714b91eeda7c83b22305a3d1773c16fc18c3d4168101f6cb6e40e9f5489a91b04e2d7aa747a1a5e9d934631108fa5da3e6fc0fe37edbfe38c01d6eec480a4061397b49287e87d441d7572f716ae3c351f7fc4563b558d72686bf4c197ec9b050d8e0a3369886244665433fad33fb134ce3d52ef9c", @ANYRES32=0x0, @ANYBLOB="2b03000000000000380012800b00010067656e6576650000280002800500080002000000060005004e230000140007000000000000000000000000000000000108000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x501801, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000200)={0x4, {0xffff, 0x0, 0xffff512e, 0x9}, {0xf02, 0xffff, 0x2, 0x4}, {0x40000000}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) 21:06:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) dup2(r0, r1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x100000002, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000000301ffff00000000000038fed24ae18cd0346e18899d62feb35ba0f01f58e93793b0511fc36905a480b3f4204e259a1f3eff75b6df3afc97140e5fdcc3994fce4e7120ddbfe2aaf2f026747a948b06203ff7ef40c696b1ef68031ea40f453f6fff92e6aefccf8380b4a71be3ef6484d4810396b74ee45a2df7e810df0d74cfe251998926cb6a2c443e93948a6cc033ae7769303dd5522d54585cbf260a0b27ff467c3b5de63e0886efb9d59c962ccf36e1bac1650b8ef13a12a0d2aa2e0e7d1cc0a71dfe9831c4caa7dfdada48b6ea85bb502dfb97f84fa23068a79206cd38a71be542c2e3087a3fa6e9a01ec8df96c2f373adfa78fbbb62bc420534151f5bc414bf66068b704de8edaa954ed60df31cd366d4ca597ac2315d849ca904ce67c074f023e059956ab56c89752abf8517c40885cc4d536ee1f5c128b1a1aae41b7dfc4a69988954dfe09a255151b802229aac245e2e3a0f7e32ac55837028123186115e9563c53bac0c72e663b0449827530686a8e29823b31850fc38dd6a3fd15ea97320f51789cbd6fb2405776db38f813de70bd7afaa489dff724b786ad69c811bc43e64eaf89f65796a38d7072624e9557b4ed5edc730ba8ca694bb8e1953d26602d4cd8468e7ae952ead9ae6b288a291008513e5f293b934"], 0x14}}, 0x0) fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, "add088e814b8ceae63f1fe1723fa6a4c84bd32"}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000440)='devlink\x00') ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000480)) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x8000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x318, 0x1b0, 0x1b0, 0x0, 0x1b0, 0x1b0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) prctl$PR_CAP_AMBIENT(0x2f, 0x6ca45a0d43cf1f10, 0x22) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) 21:06:18 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000100)) capget(0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1c9a00, 0x80) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r3, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r3}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e24, @multicast1}}, [0x10000, 0xfffffffffffffff9, 0x7, 0x0, 0x6, 0x7fffffff, 0xffffffffffffffa4, 0xffffffffffffffe1, 0xfffffffffffffffe, 0x1000, 0x11fa, 0x4, 0x7, 0x39, 0x80000001]}, &(0x7f0000000200)=0x100) socket$unix(0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000140)={[], 0x6, 0xfffff20c, 0x9, 0x9, 0x1d6, r0}) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x240, r10, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xe4, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa1cd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa6d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cb1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50eddb9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71139378}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9545}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x685e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3637}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a9e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x908d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74397d15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeedf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c65266c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a143662}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11592c2e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe728}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe4d8}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e82a39a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ed04cbb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3671}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x300e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4abe9906}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b9312d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7c9f}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16ab}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1fbb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf57}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdeea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc5f0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ff1}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x313d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x84ca}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa043}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x945883b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc3f}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe497}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8028}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b45f22e}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62819ee2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54b23bd5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68932ea7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc207}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb95}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7194}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x192bc325}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9f3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x625087cd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f0d0e72}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46d7305a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bc0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x589c9dd7}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000040)="41902d7e78bfdc9a00f064e59e"}) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dlm_plock\x00', 0x404c01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000280), 0x4) 21:06:18 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f02, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 615.176973][T17465] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 615.668297][T17480] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. 21:06:20 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x4020940d, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:20 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x123) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x400480, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1d) 21:06:20 executing program 1: alarm(0x8) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x7fffffff) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22045}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6}]}}}]}, 0x3c}}, 0x0) 21:06:20 executing program 3: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x10080, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000) 21:06:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@bridge_getlink={0x28, 0x12, 0x800, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINK_NETNSID={0x8}]}, 0x28}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$nbd(r5, &(0x7f0000000400)={0x67446698, 0x1, 0x1, 0x4, 0x3, "fe3e01126a5b220ccb9d4ec96855b5693267006d858a212f20190fc8c31b2697863f02ab1a7c025b4d857061ca222b0292ab7a3e6d57fa714521bf2ac958e823d18cb5ccaa2e081b427e01832e33856a8af6862609b7be99ce1b60a258af6fd6b28fa8491949df1d534154662f0c3f922225ecb70d5c16261164d899167951553d5f602aff3ee806eba07e62738536319504e667bcf7becc124858124f5e90365bf11f939780f8b382aa810c67d4de10ea43db023cae96a9b1d23ee23674c1611dd4be9ea927814be08daeddcb57838955c8bd30c08845329538f586b961fa14dea3a8431c5127d10aa195081fb5c865eb71fb30f43e"}, 0x106) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xdf5, 0x21f8}, 0x14) r6 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r6, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xff01) splice(r1, 0x0, r3, 0x0, 0x1ffe0, 0x0) 21:06:20 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x6}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0xcb, 0x36fe}, 0xfe3e) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) bind(r2, &(0x7f0000000080)=@ll={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x80) getsockname$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0xa4, 0x2c, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3, 0x2}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x74, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x3d9, 0x0, 0xffffffff}, {0x8, 0x8001}, 0x73, 0x7, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x5, 0x10003}, {0x2f, 0xffffffff}, 0x21, 0x20, 0x4}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0x8}}, @TCA_RSVP_POLICE={0x0, 0x5, [@TCA_POLICE_TBF={0x0, 0x1, {0x8000, 0x20000006, 0xc7a6, 0x7, 0x9, {0x2, 0x1, 0x5, 0x8, 0x7f12, 0xfffffc00}, {0x2, 0x1, 0x1000, 0xfff, 0x3ff, 0x80}, 0x2, 0x2, 0x8}}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x177}, @TCA_POLICE_RATE64={0x0, 0x8, 0x6fbb}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x7fffffff, 0x9, 0x800, 0x3f, 0x800, 0x4, 0xfffffffd, 0x4, 0x7, 0x6, 0x6, 0x3, 0x7fffffff, 0x1000, 0x7fff, 0x400, 0xd58e, 0x8c, 0x9a0, 0xfff, 0xffffffff, 0x9, 0x2, 0x3, 0x418, 0x6, 0x400, 0xf0d, 0x800, 0x40, 0x8, 0x775, 0x3, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x401, 0x4, 0x9, 0xc91, 0x8, 0x7fffffff, 0x8, 0x9, 0x6, 0x1000, 0x8, 0x1, 0x5, 0x80, 0x10001, 0x80, 0x7, 0x7fffffff, 0x0, 0x5, 0x6a9, 0x7, 0x10001, 0x0, 0x1, 0x55, 0x10000, 0x3, 0xbd3, 0x5, 0x2, 0xe6e1, 0x756, 0x6, 0x0, 0x400, 0x5, 0x5, 0x8, 0x1, 0xef, 0x4d32, 0x101, 0x101, 0x18000000, 0x3, 0xf0e, 0x2, 0x4, 0x2, 0x3f, 0x800, 0x6, 0xffffffff, 0x8000, 0x1, 0xff, 0x6, 0x200, 0xffff5a26, 0x8000, 0xfff, 0xff, 0x8, 0x2, 0x3, 0x57ed, 0x35, 0x7000, 0xffff1479, 0x4, 0x8000, 0x2, 0xfffffb7f, 0x2, 0x108979c4, 0xfff, 0x6e2, 0x400, 0x9, 0x6ba, 0xb58, 0x81, 0x101, 0x81, 0x9, 0x3, 0x7fffffff, 0x80, 0x9, 0x7f, 0x3408090, 0x0, 0x8, 0xe9, 0x7, 0x8001, 0x3, 0x4, 0x5, 0x7fff, 0xb0a, 0x11e3, 0x8000, 0x1b7, 0x1, 0x4, 0x490, 0x7ff, 0x7fff, 0x2, 0x101, 0x81, 0x7, 0x10000, 0x2, 0x3, 0xea6, 0x323b, 0x7, 0x80, 0xfffffff7, 0x8d, 0x9, 0x0, 0x7, 0x7, 0xfffffffb, 0x4, 0x6, 0x1ff, 0x7fff, 0x5, 0x7fff, 0x6, 0x1, 0x8, 0x0, 0x6, 0x9, 0x400, 0x7fffffff, 0x3f, 0x2, 0x3, 0x2, 0x0, 0x9, 0x8, 0x4, 0x0, 0x100, 0x7, 0x401, 0xff, 0x13, 0x3f, 0x3, 0x6, 0x7, 0x6, 0x72e, 0x3, 0x1000, 0x7fff, 0x20, 0x8, 0x80000000, 0x3, 0x80000001, 0x401, 0x6, 0xc270, 0x6, 0x4, 0x2, 0x3, 0x9f, 0x7, 0x5, 0x9, 0x3, 0x8001, 0x9, 0x7, 0xc816, 0x83a, 0x0, 0x3, 0x5, 0x4, 0x2, 0x8, 0x7, 0xfffff546, 0x9, 0x2, 0x1, 0x80000001, 0x7, 0x8, 0x2, 0x80000000, 0x0, 0x838, 0x3, 0x0, 0x400, 0xfff, 0x0, 0x1, 0x7, 0x0, 0x200, 0x1, 0x4, 0x3, 0x1ff]}, @TCA_POLICE_RATE64={0x0, 0x8, 0x3ff}, @TCA_POLICE_RATE={0x0, 0x2, [0x5, 0x46, 0x101, 0x3, 0x45d, 0x0, 0x198, 0x1000, 0x7e0, 0x3f, 0x0, 0x0, 0x0, 0x6, 0x2, 0x1, 0x2, 0x81, 0x80000000, 0x7, 0x5, 0x6, 0x67, 0x50, 0x8, 0x3ff, 0x0, 0x400, 0x100, 0x5, 0x32, 0x4, 0x7, 0x6, 0x4, 0x5, 0x7, 0xfff, 0x4, 0x7, 0x6, 0x3, 0x2406, 0x3, 0x5, 0x0, 0x9, 0x4, 0x4, 0xfffffc01, 0x5, 0x0, 0x8, 0x1, 0xffff, 0x36d37280, 0xffffff73, 0x200, 0x80, 0x7, 0x2, 0x5, 0x8, 0x0, 0x1, 0x7fffffff, 0x6, 0x4, 0x3, 0x4, 0xffff, 0x10000, 0xbce8, 0x3, 0x52, 0x3f, 0xc34, 0x80000000, 0x55a, 0x100, 0x1, 0x10000, 0x3, 0x6, 0x80000000, 0x4, 0x1, 0x80000000, 0xfffffffc, 0x4, 0x5, 0x9, 0x40, 0x0, 0x12, 0x8, 0x1, 0x6, 0x2, 0xffffffff, 0x6, 0xff, 0x0, 0x0, 0x8, 0x1, 0x0, 0x20, 0x11bb, 0x4e, 0x7, 0x20, 0x40000000, 0x2a, 0x0, 0x9, 0x7ff, 0x10, 0xc36, 0x2, 0x200, 0x3, 0x10001, 0x8, 0x9, 0x1f, 0x6, 0x5, 0x7, 0x7fffffff, 0x4, 0x7, 0x20000000, 0x8, 0xc8c5, 0x4, 0x0, 0x100, 0x0, 0x2, 0x7, 0x8, 0x7, 0x7fff, 0xfffff192, 0x40, 0xffff, 0x40, 0x2, 0x7, 0x6, 0xfffffff8, 0x7f, 0x6, 0x0, 0x3, 0x10000, 0x1, 0x15c, 0x3ff, 0x8000, 0x6, 0x2, 0xb3, 0x1, 0x8, 0x0, 0x6, 0x1e062c19, 0x2, 0x5, 0x1, 0x1, 0x20, 0x4, 0x1, 0x8, 0x5, 0x7fff, 0x7, 0x2, 0x5, 0x6ba36df2, 0x3ff, 0x200, 0x18d, 0xfffffffa, 0x1ff, 0xcfdd, 0xffffffe0, 0x18000000, 0x5, 0x7fffffff, 0x800, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7ff, 0x0, 0x0, 0x7, 0x6, 0x3, 0x7, 0x7f, 0x0, 0x9, 0x9, 0x0, 0x3, 0x4, 0x0, 0x400, 0x0, 0x7, 0xd6, 0x8000, 0x286, 0x0, 0x3, 0x7, 0x5, 0x7, 0x6022, 0x3ff, 0x1, 0xffff, 0x2, 0x9, 0x9, 0x7ff, 0x1, 0xfffffffd, 0x3, 0x80000000, 0x2, 0x200, 0x2, 0x7fffffff, 0xfffffffe, 0xba, 0x9, 0x8000, 0x2, 0x3, 0x7fed, 0x21b, 0x0, 0x43, 0x5, 0xe9c4, 0x7fffffff, 0x8, 0x4]}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x100}, @TCA_POLICE_RATE={0x0, 0x2, [0x5, 0x0, 0x7ff, 0x8000, 0x7, 0x400, 0x4, 0x6, 0x4, 0x6, 0xfe9e, 0x200, 0x4b, 0x7e3f4f79, 0x4, 0xffffffff, 0x4, 0x2, 0x6, 0xe3bc, 0xa6d, 0x3f, 0x3, 0xffffffff, 0x6, 0x10000, 0x4, 0x80, 0x40, 0x0, 0x395, 0x6, 0x3ff, 0x8, 0x50000000, 0xbf23, 0x20, 0x0, 0x2, 0x0, 0x7, 0x0, 0x8000, 0x7, 0x9, 0x2, 0x3ff, 0xfff, 0x9, 0x6, 0xff, 0x3, 0x1, 0x2, 0xfa, 0x0, 0x5, 0x0, 0x3, 0x0, 0x7, 0x1c, 0x97e, 0x7, 0x9, 0x7, 0x8, 0x8, 0x4, 0x0, 0x4, 0x6, 0xc000000, 0xd3, 0x49, 0x80000001, 0x10000, 0x9, 0x31, 0x2000, 0x80000001, 0xafd, 0x7, 0x7ff, 0x3, 0x6, 0x40, 0x400, 0x81, 0xffff, 0x6, 0x81, 0x5, 0x1, 0x7fff, 0x4, 0xfff0, 0x20, 0x8d6, 0x80000000, 0x7f, 0x3, 0x8, 0xfffeffff, 0x8, 0x6, 0x7ffe, 0x6, 0xf1, 0x9, 0x101, 0xfffffeff, 0xffffffff, 0x2, 0x2, 0x0, 0x10001, 0x5, 0xfffffff7, 0x4, 0x2, 0x77fb, 0x81, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1c, 0x4, 0x3, 0x3ff, 0x6, 0x9, 0x506c, 0x7fff, 0xdc1e, 0x8001, 0x959, 0xfff, 0x8, 0x5, 0x1ff, 0xffffffe2, 0x3, 0x9, 0x9, 0xffff, 0x5, 0x6, 0x9, 0xffffc823, 0x1829, 0x4, 0x4, 0x5, 0xffffffff, 0xffffff81, 0x9, 0xa0, 0x9, 0x7ff, 0xfffffe01, 0x9, 0xffffbc99, 0x3, 0x7, 0xfffffff8, 0x2, 0x200, 0x7, 0x2, 0x84, 0x200, 0x1, 0x1, 0x3, 0x7d, 0x1, 0x0, 0x3, 0x40, 0x1ff, 0x100, 0x8001, 0xcd, 0x4, 0x1f, 0x81, 0x80, 0x7fffffff, 0x1, 0x101, 0x1, 0x832, 0x5, 0x1, 0x4, 0x1, 0x81, 0x80000000, 0x9, 0x5, 0x3, 0x5d, 0x2, 0x3a70, 0x4, 0x6, 0xf3, 0x5, 0x401, 0x0, 0x81, 0x1, 0x2c5, 0x10000, 0x5, 0x7, 0x80000000, 0x2, 0x8000, 0x38, 0x3, 0x1000, 0x7, 0x1d3, 0x0, 0x8, 0x6, 0x3, 0x5, 0x568, 0x8, 0x800, 0x4, 0x1, 0x4, 0x5, 0x870, 0x3ff, 0x76c7, 0xfffffff7, 0x8, 0x8001, 0x9, 0x2, 0x926, 0x5, 0x81, 0x3, 0x4, 0x7fff, 0x553]}]}, @TCA_RSVP_SRC={0x14, 0x3, @mcast1}]}}, @TCA_RATE={0x0, 0x5, {0x3, 0x9}}]}, 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', r7}) 21:06:20 executing program 4: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x6}, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff}) dup2(r1, r0) 21:06:20 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x4020ae46, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 616.849870][ T27] audit: type=1804 audit(1583528780.716:2421): pid=17506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/231/file0/file0" dev="loop3" ino=114 res=1 [ 617.090436][T17521] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 617.099881][T17521] FAT-fs (loop3): Filesystem has been set read-only 21:06:21 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='map=acorn,I\x00']) 21:06:21 executing program 1: setresuid(0x0, 0xee01, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x78) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}, 0x40000}], 0xc6, 0x24000000) [ 617.310162][ T27] audit: type=1800 audit(1583528780.716:2422): pid=17506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="loop3" ino=114 res=0 [ 617.446166][ T27] audit: type=1804 audit(1583528780.776:2423): pid=17506 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/231/file0/file0" dev="loop3" ino=114 res=1 21:06:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000028c77000ffdbdf25090000000800090005ac0f170800090005ac0f00050008000200000008000a00501901500400280011000700291f3858b2612177a86f494c6600000008003700010000006192559a925e24f5232203ac82cc6af18a489ff8"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) bind(r5, &(0x7f0000000080)=@ll={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x80) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x11, 0x800000003, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r15, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r15, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) bind(r11, &(0x7f0000000080)=@ll={0x11, 0x0, r15, 0x1, 0x0, 0x6, @dev}, 0x80) getsockname$packet(r11, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x2c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}, @TCA_U32_SEL={0x14}]}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', r16}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xf8, r4, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r17}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x23, 0xbe, "3ed3d5a5c58d498e9719937ffc331ea4d1f7d886c93ced5d76b672886e198b"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x87, 0xbe, "a98b8d88ef3fd652bd4857b9857a9752c6207ad816b51f565dd15b223ff3b37d65bf21c2e7b6a234d9d74e8d8c8fb722a7f94579c85fbfbabdcc64ae67e47e2b0d1dbf25d0ee61668c1e8cd14216fd1c5ba2a45dee0f448c523aa072efea589d4650d3761bf2d452dbf80eba38cd0425c1ec5f4c172fd07a549fdfbe19a65fe4c8ca6e"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}]}, 0xf8}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) r18 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r18, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r19 = syz_open_procfs(r18, &(0x7f00000002c0)='net/dev_mcast\x00') sendmsg$nl_route(r19, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) 21:06:21 executing program 1: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_tcp_int(r1, 0x6, 0xd, &(0x7f00000000c0), 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x3, 0x43) tkill(r2, 0x2d) wait4(0x0, 0x0, 0x0, 0x0) 21:06:21 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x8) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0xb9) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x118, 0x0, &(0x7f00000002c0)=[@acquire={0x40046305, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x0, 0x2}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @free_buffer={0x40086303, r6}, @exit_looper, @free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x0, 0x8, 0x6}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fd}, &(0x7f0000000180)={0x0, 0x20, 0x38}}}, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x110b}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/59, 0x3b, 0x0, 0x20}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}, @acquire_done={0x40106309, 0x1}], 0x7e, 0x0, &(0x7f0000000400)="defdfcbb51e5acdda88f7232409756a9d4c89dc5bfc20e67196cbdd8b884d4b2f270217aea3d8513a02602a5a5b1d65cfa2b9ab8eda4ec91bd60bf52fef07a68f70544f3e77c0ecc45c001225f47d58a4e0f41ee2b4e982c3868a5907eebbf3f4e19c0ed9992f5c374bb6c71b68c2e60d8c7a4bae05f85aa01c633c35b98"}) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 21:06:21 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ffc}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000140), 0x12) [ 617.641663][ T27] audit: type=1804 audit(1583528780.946:2424): pid=17521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/231/file0/file0" dev="loop3" ino=114 res=1 21:06:21 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x80044942, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:21 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000020601010000000e00000000000000000500010007000000050004005e9d80d1100003006269743a70001c0007800600054000000000060004400000000008000640000000030900020073797a300000000005000500000000000000000000009675f503abe43ed00e3386c446f087feb97b7da0ef17ec70fa0bfca514c709b160dfa7a735dee33d71fb82882ba5c0"], 0x64}}, 0x0) 21:06:21 executing program 3: r0 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="8af10c0e1317fde7631f772a1df93bb732c1fa152a72ce158e2d4a97de261974efed617898", 0x25}, {&(0x7f0000000180)="12b22f", 0x3}], 0x2}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$xdp(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x3a}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="d195adce8634f6e22f21906231dd07e9894ba1934e39eea8194683776bdee7d5f2673d4a25e77c031413954783d4a5eb191a85f99f222ffdf480f5d6235ae94ddc38c8a0494baf6f9cca8a60cc94a4417b0002b00cbc81d1184d0dad8ab8e8b70280607f2424c852cfb39b984f451ea8134276d8c3fa48d669d8bd39067fc51c42ea7fdf607dac56a45438715f07b85e5fe127429cc7e3b5cd52c7374fc6caf935ed975aea1ec9f03105", 0xaa}, {&(0x7f0000000340)="d40eb0904ce279219f9f3ebede06e55ccdbffe5261936dea01381c2fb5eeda1de5e58f74c5a38c58303f4b4572e3d98ee417dd445ddb3826a4a2ad7863f75cc0677b9b3a298a24bb631ae6a35ea444771bfa1429196c9e3b4aa5020bc2aaa7b80c81e2395507e80acac846ecb038b25a3709cb0c828ca078952d70ce566e9e65d9255f2b4854362d20a739bd85e9390adee0594ff96bd81ac4b6562904944de051ab2982a980", 0xa6}], 0x2, 0x0, 0x0, 0x80}, 0x1) 21:06:21 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) 21:06:22 executing program 0: r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x2000000000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x26b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x208401, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000080)) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 21:06:22 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x80045430, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 618.299886][T17569] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:22 executing program 2: getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sysinfo(&(0x7f0000000000)=""/22) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000040)) 21:06:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xffffff8d, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000000000010600000000000000000a20000000000a01000000000004000000000000000900010073797a300000000070000000120a0100001000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003400000000009000200000000200000000004000480040004800800034000000004140004800c0001fd309ee03f1638f7590314686d0a756600fb0000001100000200000000000008000000000a0000000000000000a1170da00cfe363d228b39185c3967c0f698bb93dc047affad1440288546596f39b277a62ec47361d0fde65bb4b0bd254bf5da013cfbe9be857df96f9f38bf9e1544d3b194cfc4fcb81023560d63dadb7f7b5fe922c47ae02620de710a4db843495f71813dcacf3d9504888c15b4e22a31a6c395c9a39382b8c4caead2e1a082fc5fe92b74779b4ee084b94c36f7fb4bc8aed985ffe0a72b4af5dbc995bd2e5f35bede651c5e1ffb82b3dc61655750ad2a74bc5d91fef0d85e72f5376bef86775d02163800068fbaea874c232478cd9425a992d4a65446d6606d9371f5ae606708e79e04e511125d06a1e8c6cd3b25f2d5514a98eabe1ebc344f55ff4e5a32f3123818b0964d4ecd1d69b4b97b47fe9945dee649e6359542c6f708e3d06e7c95dd28e458395c4e8471b55b01f8c84dcb8faf090a7878144a32642b299f3c40c0d1e9c7dc34299ddc8380c0b2ae6d76ed278b6361eda673bc119e2a441c8bf6b3212a9bbaf878b8cf45c2ca146c47c22d16a18ed72a4ccfb4193f79c5268a3ceefa88d852f52d110f42147deb82afc8b9aca5f32e960e627e7de12465b08b9fedd0ae33fd0b512960c21c43ada0824e8a95eedb89212da9361c6be09cf912df2bf717a68a47bec63cb38e09c21ff073e1512a99376daf70000000000000"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x8}, 0x0) 21:06:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x7, 0x5, 0x4, 0x20000, 0x5, {0x0, 0x2710}, {0x1, 0x8, 0x3, 0x0, 0x1, 0x4, "c3107ba8"}, 0x20, 0x1, @fd=r2, 0x3f, 0x0, r3}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000)={0x3}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setfsuid(0xee00) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000080), 0x4) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000806010004070500f037e3c0b7cb7071a1a02994dcf95258d76ba2010007000000000000bad8d18cf6437b31cac3087a24061ee09c197b6845edb079de23f1c53ef12ce497533bb96665a4ab590c72f4a13500990676e5f066985534601e3dbdc5269478ed76d0956bd8903049b93686466ab369c3961a048c5ecbfeaa09dce8e2d63c4cfae0956669b41ab433f1fd6ba1ad0bd7"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff0000000000000000000100000000000100000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00']) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r9 = dup(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000400", @ANYRES16=r15, @ANYBLOB="010000000000000000000f00000005002e000200000008000300", @ANYRES32=r14, @ANYBLOB], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r11, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="040026bdfff9e529f2f53cc91ed67b7000ffdbdf251100002d08000b008100000008003b00d6aa1124a30b0b08643fdd0000060028"], 0x44}, 0x1, 0x0, 0x0, 0x4000801}, 0x440c4) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_REVISION_TARGET(r9, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) 21:06:22 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="9c0000001000050715510500132c379401000200", @ANYBLOB="e24aad72fcbdcb9f8830866eabd9132c62379a2d5d8a8bf7b94f57b08de15bc43a1bf3ecf59e9b6be7f1432c0c71e33330beee252e0e8fb1e049de72b9153fe5b3ba35e4710138fee4970a612ac314827f1c38c8996bc9baca2d3279533d6af222a88b72ade919fe27a208ae4efe166bb188e80c89e8c2fe1673a36e79c9ae67c903793dd9b80e885dd6b573e58324d872f7e05072c31ca71eef65a229c59de0ad08e9eeea890e2d7ba31561610c797e561677cc541959358dd128b0b0693a06eb0093b6f5a447260df48e29bd5b49d1358225e185b806b15ba178ab0a2841ae352cfb1b3d7055039f7873f287c64075bf1a0fd895fcef36ce32", @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1b49415642c249dc58c72a1d62e22b270c659ef95c90323e3a0d9d545edb46beece802952ef6bf6dd57e2811d714a1f1d89eec35f40d2fb5b849e58088cb6b1020085076d1717abcdc2492e1cbbc58893a06bf41157cbb33424d39374368e6e65bb581bceca12f5e1c0eb72c4d2e0a00a1500e8bb45dbc20e2ac329ea00"/135], 0x5}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x40000000000025a, 0x0) 21:06:22 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x8004562e, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:22 executing program 0: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setreuid(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65342c696e6465783d6f6e2c7d657461636f70793d6f66662c6c6f7765726469723d2e2f66696c65302c78696e6f6f66662c6e66735f6578706f72743d6f66662c6e66735f6578706f72743d6f6e2c696e6465784a085b796f626a5f726f6c653d6e66735f6578706f72743d6f66662c736d61636b66736861743d2f6465762f6b766d002c646566636f6e746578743d73797374656d5f752c66d071c184723d"]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) r3 = open(0x0, 0x141042, 0x0) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=0x0, @ANYRES16], 0x3}, 0x1, 0x0, 0x0, 0x20048084}, 0x4004010) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000000, 0x0) pipe(0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) creat(0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200)=0x5, 0x400000) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, 0x0}, 0x4004005) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000400)=@ccm_128={{}, "78395c95d0fdfb60", "520b1e4aa0f71c22ff00", "a9016007", "f6885a10e7196cef"}, 0x28) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 21:06:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) fchmod(r0, 0x10a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x20000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x0, 0x7, 0x1, 0x5, 0x9, 0x3, 0x2, 0x9a6, 0xfff, 0x5, 0x80000000, 0x400, 0x4, 0x4, 0x4, 0x2a, {0x8, 0x9}, 0x4, 0xb0}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1c}, {0x8, 0x1}]}}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x11) r4 = mq_open(&(0x7f0000000340)='!-selfprocuser\x00', 0x2, 0x80, &(0x7f0000000380)={0x4, 0x100, 0x1, 0x98c}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r4, 0x1b9cb000) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000180)=[0xffff, 0x6, 0x1, 0x81, 0x1], &(0x7f00000001c0)=[0xf17b], &(0x7f0000000240)=[0x2, 0x1f, 0x8001, 0x1f, 0x2, 0xd83e, 0x9]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000400), 0x4) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f00000003c0)={0x8, 0x1, 0x7}) 21:06:23 executing program 4: syz_emit_ethernet(0x46, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x1f, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @remote}, "400000e3ff000000"}}}}}, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 21:06:23 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x80082407, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:23 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfd, 0xff, 0x0, 0x0, 0x41bd, 0x4700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) fcntl$setpipe(r1, 0x407, 0x2e) gettid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000000200)) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000006c40)={0x3, 'xfrm0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r7, 0x5403, 0x0) ioctl$TCSETSF(r7, 0x5404, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, &(0x7f0000000040)='y\x00', 0x2, 0x3) dup3(r4, r5, 0x0) close(0xffffffffffffffff) open$dir(&(0x7f0000000000)='./file0\x00', 0x28000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r1}) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000140)={0x2, {{0xa, 0x0, 0x8, @mcast2, 0xfffffff9}}}, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r10) r11 = accept(r10, &(0x7f0000000240)=@pppoe, &(0x7f00000002c0)=0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket$nl_route(0x10, 0x3, 0x0) dup2(r11, r14) 21:06:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0xffffff0f00000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000400)={0x9a0000, 0x41e3, 0xff, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x9b090f, 0x3, [], @p_u16=&(0x7f0000000380)=0xf82}}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r8, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r8}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000440)=r8, 0x4) 21:06:23 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(r0) perf_event_open(&(0x7f000025c000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3e8, 0x300, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x9000}, 0x800) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$packet_buf(r8, 0x107, 0xd, &(0x7f00000003c0)="f970c5bec4372784b8653576e75c5afb4b6e4fcc77b70eeeb8318739c30ec5afca11f690f7837ed27dc2e8affd7966ced22a0a68348e3d02ba25c092d5b0146d6c71c11f723b2b0a7984b7efcd16acbdb8904cff2617d32eb37750897d4d7f9b8298db959a65e5c8cb1a918bd5f7ddbaa4d2c0b50414ed82d80317b126d2f11790e1b01de26b0bd812cd7681627e23513dfad445636e4394014c68457b2af16164ea003b73532a3c4652f9129d13d1146ff74889f0a9b2f24a7e1d4ba1d4691e7a2c97f9a5e0df2c475b8cb6881143cbc9ac0cbccf04a717a117c22df3957250ddd749c87d3f7ea7bee1c01c79c7106bd8c59a9a37728668a718e6720573ce1836460f4bbdfe06151fc929092dbbf065bfb1eeb8270b34940575430465f1a27b2c623e10fa0127e95d3b67ec274b7dd2209b799328caa9c298d5b1fb6c018d99a9241785f0865352c669e0eb1d134b07abea075165dc898f3b8215a74756d53a2e1ab3ba57e8e022e9c915dd7fdf0cf9f2bb4be4e0a0646515a7b5648ab6432b5867a3ad090aef239174b4919ee0c617b00c6b4055337b39e6fd7b37ce0a2866f25cd56d2ac5e8ade0a250a891d22e807231912b1855a4830c98ac49dca599b25f6874d23709554b467fcce237b192f1fdb5a6e6a09bd4044e01da8665f1071e522551a53c1aa1ce271b4f293e3f73e59123a38c9a00ff64a91473af703ac67f772aabca079f432cb91fd41a278dc2abcf2a3a6c1ec856254ed9800c7b25abd10e70b4935d12e9d966e011bb49a4fb4e528ee3aef27c14a3a70566cbb99c4efca1a19c83e68de00a42a800d86612af2d0847258dc85f70ff67f72f628b13cd457771a8cb898d6042f471f8fc04a15121a97de62b7265d799547102d9ec448ed70ae84c43675f72e228fd56b2ddf085165663d0d83b470da94852078a42b24e3289712bdd7b813df4bd9eec494d7bc8e1f63e5bfc84fdf49b24312bcdf5106eb0194ec72c90fd1e709d9e248241b9603d851f1e78e7258b2e4e5e30f3b529c922d2aed38951ac73e6d1c4823d0589434418276ab41480aea21a8f61cb5330a0d8cf915f17e0c43d46b7a22610c3424f3577c0b39b74b9918eaad66a75ee90ab3dd86723e04dfdf49e81db90091ebff1757e1b2c8397052a8af1280d0551bcf5d9269b5660ee7123d3856822df93ca0726c13c3cd3f56cf58823291b054b352ae6741892e28bcf758fc890005c1e7b788df76629d0d7be2166b837765eeea71c7e83e78ee12d9a4f34d5bb5d2a256917ae72837c750d11220bb7d9f9c2b46b892e3a6de8c15e8e99d313293e249e8eb9fa1d91c391b905107876d246339f23b5f6fbaaf9b3e5651fde643a0fabad0109606c6432a7ccf56334175302ae3984e4b9a529cc2883d6481da203efced47b41792f3def28bccde55ae44dfc51472def35a1ee94947afc2d8f446a37f29d82b0130961bc776c854849de63ec02b65cf5ae9eeb92eba5c905d70d77b9a2278181a9f37e4dc47b2101439f5c62f5fa25dd439acfc0699d38d451a640524c44c5a286fcca28f061edd5cce7f817931a59497f516d0644723999afa7f74342930ee1fa10ae85b1abe2f4c369489d7c82c94d86fdabf987e3c0978747caf3bf03e9f66e0d6796815d423df73a3b8717c67365b84f0e066302ee1b64b4b7b15fd56498927660fbb020cf8d01cb438bc9376bd3316cc65d4d1e1a4805ea6fcf4bd5f1445e74e2d66b18bcfe744f6713fcf03bd81349b8a899073ed78b326e06e09fbe9a3a1c7501086f9080916fa98e318122aecaeb5a1b6aa9f9c2a2f9d0964acc0f0fe674fcea19926e9752c070382c020c32c961d08d4d758bf5e5e703e62dbc179a7acdbd64791031f854353e6a6fccf0a35458c6089f70ef08d3082299677f3e6af66a0484d4e94bdbeee1080ba67ce59d72175ce108b59f338c6f0d08dbd5698fc13f04097bfe04c84386126d32d33e4bb962348ed3aea081759ffa51bc3b733ecba22a2f908d0d4b89b055cf457cf8c21d0963c884f28015c25f5c1b1ae1ce9a27f48ce1fccff7763f8dcfbdfd95ff4a0caa09438780955e5692cba0aa44b0f9ca979696340b4080013c60cdbdf3f170c74603c3030567f0d32fad91386607e94a96c62db5aa294a8e652b31ba4b29edd5a804366096096494baaece2cbf3a1dcb5bafecd570ba7239754004366d81060a906dafcf7fb24dfb8cd01be52e0c6c9e2e94785942d9bf0d39eab11fb1a1d03fa39ae5e750594e9a57250d3fea0d69d39247eec46d564aec200473e1956e730be5fe99fed016db205918faa9282df8a6d3d4d34e8efee812f05b10bf37ca182eacd2f0ae4403dbd6ba3fb594b355e83f38aff90af5afe321d201ef4ce219b6d99b6293ccc9615ff1c902a1140a1f7ebfe732542971c84dfcbb77ef35732b4deb94fbd0543668a71e37d112500c76fa5abb2fbaef6a7459c89e304822739137f776901d79f5a3c7c8cb3020d0a7e9607d2fdc842045435f2b0eb7c458abcbbf39599d292fa3c68efe46178b061ee3bb6336a4b5572f240a2fd746770598936c8992b8fc0aefb8bf5da8458bda28b1e07bed66d9c88c7d269c629fcc0b20071fb657d62e7f981a64f17c3fca51dd4cdcedb4a4a25578d0eabe44e6578e6199d8552dadb198be2ff944bdb74f40f0a454e808cf182c6d67699b909145fdb55af65a77612149d983e4d015d789ccd6d144e5eb114b01e03d57111525ae818557a94005404f69fafd82ec436b696f8a4c1020de20377c18a55040fad5a81efaa891961bc93a0ac8a454bd0ac452c59f03ec8def9d76ce58ffac2d31a403e68f58305c8f4902688febeaf9c2f0ec8395b25dd921a521ab86402d781d9b759cc86a076ae1f76076a15a06be872ad2a52645f3b3c53b9af82719051bce0315200668f0656c7a2b36ed8d7a9dfb77f0bcb6915d031f28ed084b70b9fbbd76027ecb9879267eb16adf307d515649f4d732130a52b67c848bd8a9e2a9ca1dadf9157aca2285f2eb04395edd64a56c121217c97f6534041a82225231686f84c2edbcc2f7afe556b89f97deba63f56cac77740922f924efefba642299911dbac7f63b6ea711e880d0f89c5a2ed7af372264998fee2a3b88f405bcc045eaa3f0b74cfeddfe58f51f781f0893f3c5a959f47ed14bf34e656aef17c808b1b645191b838a8fb831985fe04cbbd134d5676de639b63b7797680c8853f718720cbcfbb23cce9d4b8cf83cb572eb0de632f77bbfb080bb4729ef9c3621d13fef57c135776045d1743087af9690d161ce373dede154219600c3ab95266995aa475519cd4499644eed89d3943da1e2ac1338852cdd47aa682c16a80203d2af228fa8600e0d4c83fed244ab54a5b32f9f37e1efe1a8b317f9352d5929a843345d690d3cebe418aaaa3509f7ed002572da118e11b40f9c166ea2729c4b2f812c150557c59538b8977b29d950fb1d6f537e878a0d5c8518d4874a94c68c2225716c45ed1c958eb1c633674458e93a8cc3ecb989a75a40f83da331e661c537a48c70fd8f553a9ff2342b424ec5c68b38f14ced82cc1ca2e75a5cd49e1caaabe22cf82946ea8c1c68be0ee5b89da95cf24ef59b5e50276421c71bad6b6a1873328b905d272ccc24ddaa284ddd45b8d741ea7593ac6285883c0049bd0220252564e8d00efc68e1f0c8e379c75d52f5988ef8819540170ab9c72f16abc6aa79b6e92822d98b5521a17a10146f96f89f627a730a294d2f8ae0b373c8f1860ae7ee9edb49a553b0f3f6c8ba80e99b9ad355de30c1d80609b3dba0ce3b0839291fda0970e2940d4c87b78e68afe7c9f14eb60eb1a9665ca1ba6d6bcba2cedf55d586f618362751a7ba569a929eaacf87b1915b844fd1ea5a2ea7a57b46989b48726c5cdff454280d6948fcba3452163d1a64cf8347d3f3fb02b113fc5625673db581ef5a8add0a3c9313dd56016dbc1eeda3473d5bd0d87d0cf1b6f7ad38214091ae19b293e03e4f087463fec574a28ae2377bc67f550680214bf5299e76b24734cfa04a9b2cd9c67d0912cbb87a56610171e0351da5756a4f1aa7045b112f6adb4890a76b8e523bc94788657aa2a40360eba1f60f54d00714d12136573d5e332ec033b96261ea83a7ea2684e8f97935a077bf00a980e2409247175fbb439530c03ceb897717f2d44d4d3feebcc4dccd66c1bcb5831b1a392acf61f694c590cbf42065314152c66aaf06f0699ee77a34fb88b6954f171632506e6e93c7cc03f82ff4c5b9ed5d0dd53f465250b04f8f884997df37f08365dc1d065e6b5da7ef626c9b91e4899f998834ba498f252f76625a24d46de115eb67c1abe765a0963349401314b48248ec6e0bbeb8e95ff1900b7b1e72056b1c87999001b1062facd667c287c4ecc30eab4120137f216bec3c79d36dc0ec371df8f66865636ea05697000de39ed95e648f0286b7d8b5e914aed9c6cd978642cadf79a0ea0ea413e60dbc769276325336819d2bf27c4a833583160a6faaa94c0fc3700be3ea6f42ea199f5a04608f0ea5e9c4305a2a912618968ac94f356c1eb72ffc8d157c569a826f558350eadf8e0f713bdba4df75662bbd302e6e936f5a8f82514a6279b95b24f161229a63ff3ba2c80a291828ee7d6366d74d0d258791f466c0b1e0158d58ea78af635208c1cbfdcfed93ab6e0d5226993d187b4d3a4be54053f69f86ec5e05854be9513c0b9533bda6be5c3d85106f1de5db9c9864856da31a15b139fe81fa390378d7fd6759942af1e28cbce65846e9f0cc920a0cbfb60aaef23310d646d329f1fac3c74bca415a8b0946bb65dc5d7585a35520f9a937e19cf33daf85ee0b554088df802a66801ae8ee03e9d419b570eff4f259f58859b7a2e8211c1ac0367cb8e6aab946d626d5417a1eafa3ea984c1a103b3a7d35840f39ded85e86a2568371d359f6a0fb70f3f943167bf6f93e86d0402546f9345f16860dfcdb37b2c45fecf06227f6d14512293b70e762b3d55a91d9e29b0d801de35a514178e4321294271438969c9f84c8b40ef0cfd15234b7df711f078bdde637f9bcf5a202d3e3f28d5d7ead8f8d114fef59e70824d3d83981d49fe78b23ac660d142cf0055214684ddaa15586c19243e2616701ea4d1183829b570eeeeabf7147f740f7198e47a9568c5e7793ab583f3e693cc33605bc358416cf30a960b5a91c37f0ac5bfc10a7b699b809a24296a5ed5bab260e767f17d05ffae5ec46ed1aaae99f091981ef1d3376b9de1c04339ad7b568428806fdaf4f25a797f064cf1c3ea6de8d4ff9819859feaf1598e1c58696f1b78e489a5130493f6adf386adaea93e452bb8edc06fbfc63b657992fb5fc417889465e6c36db695b9b0c740695b61e0c26e0294ccc74b5963972aab36ae214b47cd29ffdc89d5d7749a5b554ce8056ca8b466954c2893b2f5bff969a4e21129e9c6a082e911321fcf1ee071e0f629a52d3a16449c43a5c1b379f222eebb68f263d1b6d68b9ebb65a0029e77a2853f4c276f559d4c6c1e6d4a319daecbaad05f3664e4a402784c1d1da98c278ecac36deef28213b8b081ed552dac6dc1d5c67787476bccb1af68352311c8f10e5b0ba9e94aaa809b0828fa75c613f8071dffc37a586615f6ae0eac681c69ed30ee28d0bc53f895b30efaa13edf26132be5b2584614469ad6e073cae1ea8becfc3627ad3a03d7c53ef91b829bf9445b984c2d896cd26d4444df6f0efbcacdff3e757e56395a40795e9eec21415e2e39bdbd6303cbbc9cac198e785", 0x1000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x8100, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x9c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x20000003}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfffffffa}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x9c}}, 0x0) [ 619.693309][T17629] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not ' [ 619.693309][T17629] aw' 21:06:23 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000240), 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0004334a3a2808994304ce13b3d61ef5e07000ffdbc8250400f49c"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r5, 0x8917, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x4e22, @multicast1}}) r8 = dup(r7) sendfile(r8, r6, 0x0, 0x7ffff000) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) [ 619.852083][T17612] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 619.989870][T17612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 620.048407][T17612] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:06:24 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x80086301, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x1e8308000, 0x0, 0x0, 0x0, 0x0) [ 620.472038][T17616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 620.579045][T17616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 620.629190][T17616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:06:24 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x80404508, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 620.824707][T17656] IPVS: ftp: loaded support on port[0] = 21 21:06:24 executing program 3: socket$inet6(0xa, 0x1, 0x84) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5) ftruncate(r2, 0x1000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001440)={{{@in6, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@empty}}, &(0x7f0000001540)=0xe8) open(&(0x7f0000000980)='./file0\x00', 0x202400, 0x20) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x35bc00, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000001580)={@mcast1, r4}, 0x14) sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_genetlink_get_family_id$gtp(0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) 21:06:24 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x7}) 21:06:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x1, {0x47, 0x3, 0x1, 0x8001}}) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010000104008b82ff8c0449382e000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) 21:06:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000080)) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00040000ff90a33c12010ae83e00010071667100480002d1ca29c6090032d0ed64f3c3545aaf6e0f0085a4e4ebb5ef670100000000000000000000000000000000002ef0d893d3317700"/84], 0x74}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0) 21:06:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80b4}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r2 = socket(0x100000000011, 0x2, 0x0) bind(r2, &(0x7f0000000400)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000040)={0x2c, 0xa, r3}, 0x10) r4 = socket$inet6(0xa, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="100001013c000000001346b544f41c"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="100000001d00010000002000000000004b652c77de8590d5885151629c532f773ad9bfe6b684ca9795acf3c273dbc09a8dccaeaba778a5f8ba3d8f685fea30905129e9789c52e0c0fd200a267185b32c5c4f27472b3a915d32d59861a5d54e45593e58a1f8d87e6c02000000000000009bf2c1e00da0587684dec503a041965a6d162cc988b26a"], 0x10}}, 0x0) ftruncate(0xffffffffffffffff, 0x10000000200001) sendfile(r4, r5, 0x0, 0x80001d00c0d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002540), 0x4) close(r0) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = getpid() sched_setscheduler(r7, 0x0, &(0x7f0000000380)) get_robust_list(0x0, &(0x7f0000000100)=&(0x7f00000000c0)={&(0x7f0000000040)={&(0x7f0000000000)}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0)}, 0x68) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r8, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x40300, 0x0) ioctl$KVM_GET_NESTED_STATE(r9, 0xc080aebe, &(0x7f00000003c0)={{0x0, 0x0, 0x80}}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getpid() [ 621.543225][T17655] IPVS: ftp: loaded support on port[0] = 21 21:06:25 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x80e85411, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2000, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff01804500001c0000000000029078ac1e0001ffffffff1100907800"/42], 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(0x0, 0x0, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000540)=""/221) rt_sigqueueinfo(0x0, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 621.790136][T17685] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 621.940367][T17683] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 21:06:25 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:06:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5428, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_pwait(r3, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x80000001, &(0x7f0000000100)={[0x71]}, 0x8) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x7ff, 0x20, 0x3ff, 0x7c, 0x0, "63c963839df9ccff"}) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000700)={0x40, 0x6, 0x0, 0x0, 0x0, "91ca1eac9af7aa3a"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, &(0x7f0000000280)) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x2000020, 0x0, 0x0, 0x4cb]}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 21:06:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x50840, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000240)) listen(r0, 0x1da) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc4653600, 0xffffffff}}], 0x374, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg(r2, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) [ 623.830460][T13210] tipc: TX() has been purged, node left! 21:06:29 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) read$rfkill(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x10000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x20000010}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) readahead(r2, 0x6, 0xffffffff) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x605, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x1}, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="00fb9900be5d214cc99b1f8e316aaf9827c12c3dadf5572bc5dd2623f26423abe4214b1786ccdd50e6bcdf6cb0b892aa1402bcc70c7b52acced70ffef019d71bc8a05ebff9f84a45f0631dd8ed7bb4006ea74a2e90af5526a11f25a024c5b78e7eec667a97eab278d208d8ddad6c9b5a00ff6a82c2f36d96236996095ba00bc9d4e97aaf652a5e3ef869fbf601f2c022c9ffae698e1f3b"], 0x99, 0x0) 21:06:29 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xc004500a, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:29 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000680)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @local, {[@generic={0x0, 0x5, "ddadf8"}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@loopback}, {@local}, {@multicast2}, {@loopback}]}]}}}}}}}, 0x0) r0 = semget$private(0x0, 0x2, 0x250) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xff, 0x1000}, {0x0, 0x3, 0x1000}, {0x3, 0xffff}, {0x0, 0x4, 0x800}, {0x3, 0x82b4, 0x1000}, {0x4, 0x0, 0x1800}, {0x0, 0x8, 0x1000}, {0x1, 0x4}], 0x8, &(0x7f0000000040)={0x77359400}) 21:06:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000003c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = timerfd_create(0x4, 0x800) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000700)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)={0x198, r4, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}, @TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @remote, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @mcast1, 0x5ab7ea02}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3295}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbc0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4850}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x1000004, 0x6, 0x8, 0x404, 0xffffffffffffffff, 0x4, [], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x40) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x880, 0x0) ioctl$IMGETVERSION(r5, 0x80044942, &(0x7f0000000380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000a06010200000694be1e820a65bcef0bbeab000000000000b55c481fecfa21440def92e79222cd0c1fbb6cae546b7909ffd71d3d548779381ddc02340c9cae9e1500cf977771346fd941c069eb9d03dd13a9a269ae81acd179d6968ac75848c98a716c42bbdd52c5daa439f96ed285430d2f2b1ba6b5782880e368f505ea259de5581344db75fa7d83e688e087cc5ef349fa0f06a0096c4ddb9d07267b926618429fc03da2497de9a9dfe3e78403f508fc44086aafd29aaa768700"/205], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$PPPIOCGDEBUG(r10, 0x80047441, &(0x7f0000000740)) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, 0x3, {0x8001}}, 0x18) r11 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x11c, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000370f7f8", 0xfffffffffffffda9, 0x4}], 0x800000, 0x0) 21:06:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x2}) write(r0, &(0x7f0000000340), 0x41395527) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000240)={0x1, 0xd1, "611ba9a6e49bf32fd5b0f5199469c8e1684d8609a778a4e3e431bbf27b0c474b82aa5f92c1d21d5ad589e90feb9eecc5e5b23f51a14a841a5cb60185392b08783ee825bd68391b97ae97b8127f098008135c176f1c24d7997072afbede7703fc42de1e713182bb4e234ec450855af2585e5b4375eaf4e2563dcc130799a00349450c147631236259a19d325838c85ad00b8cd7609e95ffcecfecd274807c8b3fc77acde2051668c7bc6df4c49a31d70b9c0c113b3e0833c9979d6ff4829a4834fa61ba88dfc3ca0390fa5bc0029e5e6b21"}) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x40, 0x0) acct(&(0x7f0000000000)='./file0/bus\x00') mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x7efbb, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x0, 0x0}) 21:06:29 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x5, 0x80000000, 0x1, 0x3}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) eventfd2(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 21:06:29 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xc0045878, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 625.514312][T17749] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 625.640700][T17749] team0: Device ipvlan1 failed to register rx_handler 21:06:29 executing program 1: setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f00000000c0)=0x8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x4, @loopback, 0xf3}, 0x1c) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0xfffffbff, 0xc, 0x4, 0x10000, 0x4, {0x77359400}, {0x1, 0x8, 0x1f, 0x7, 0xdf, 0x0, "ef159b56"}, 0xed, 0x2, @offset=0x1, 0x8, 0x0, 0xffffffffffffffff}) r2 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000012c0)={0x4, 0x900000, {0xffffffffffffffff}, {0xee00}, 0x9, 0x7}) r4 = fcntl$getown(0xffffffffffffffff, 0x9) getresuid(&(0x7f0000001300), &(0x7f0000001340), &(0x7f0000001380)=0x0) getresgid(&(0x7f00000013c0), &(0x7f0000001400)=0x0, &(0x7f0000001440)) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000014c0)={0xa10000, 0x8, 0x56c3, r0, 0x0, &(0x7f0000001480)={0x9909d5, 0x5, [], @value=0x3ff}}) r8 = socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001500)={0x8, 0x9, {0xffffffffffffffff}, {0xee01}, 0x893c}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001540)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000001640)=0xe8) stat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001740)='/dev/loop-control\x00', 0x1000, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000001780)='/dev/net/tun\x00', 0x1011c0, 0x0) r14 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002cc0)='/dev/vga_arbiter\x00', 0xc02, 0x0) r15 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/dlm-control\x00', 0x58680, 0x0) r16 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000002d40)='/proc/self\x00', 0x400000, 0x0) r17 = signalfd4(0xffffffffffffffff, &(0x7f0000002d80)={[0x8000]}, 0x8, 0x80000) r18 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) sendmsg$unix(r1, &(0x7f0000002ec0)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="439c631b3246a3093d20ddfe3b185e44f842a39ada53846fd94b7dc3c9ad2a735d75d3342b9ca57bb46bf8", 0x2b}], 0x2, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x20, 0x1, 0x1, [r7, r8, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r12, r13, r14, r0, r15, r16, r17, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r18]}}], 0xd0, 0x4000}, 0x4000004) r19 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002f00)='/dev/btrfs-control\x00', 0x50101, 0x0) ioctl$KVM_GET_API_VERSION(r19, 0xae00, 0x0) r20 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r20, 0x84, 0x18, &(0x7f0000002f40)={0x0, 0x4}, &(0x7f0000002f80)=0x8) fsetxattr$security_capability(r1, &(0x7f0000002fc0)='security.capability\x00', &(0x7f0000003000)=@v1={0x1000000, [{0x8, 0xb6}]}, 0xc, 0x2) r21 = socket$phonet_pipe(0x23, 0x5, 0x2) dup2(r21, r16) 21:06:29 executing program 0: pkey_alloc(0x0, 0x2) socket$kcm(0x29, 0x0, 0x0) add_key(0x0, &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x40) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x227d, &(0x7f0000000780)) pipe(0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, 0x0) socket$kcm(0x29, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r2, 0x0, 0x0, 0x0, 0x0) r3 = gettid() waitid(0x83b895581628fca4, r3, 0x0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = gettid() writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000580)="ddda66d183926d11854c46551f97f18108d7c10be29e3321828e2e219d9fe3f0133a8e30a2b208050c46aaae87d48af6b65c888aa490cae5740c532bd37f2286cab4194d837ffb59bf4b41ff4630b06bf737dc12462cb1fe61e2040e8068799cb14ddc61f7bd3fe9aff756eb79e90b3da28c6656d270fa15cb67aaa3", 0xfffffcad}, {&(0x7f0000000040)="30b41c4a3cce048c8856d6771d1000e640953b439f485cde3fd4ea55645fce580c4d53d10c6536359f77", 0x2a}, {&(0x7f0000000e80)="9b7e675191d43fac386da34652c56a2c696d6231b1e36f082c09ee466ad59d88a640a67c1220e4ba31d6af123e96cd674b939172b14bb88c9e0775b8589f4aa80571f2b3d8697c9f6b834f17988d6554b082ad18e7d45ef5c180aff4ec1089532d3d8d8874ec49cd8b62b05bf7c3838842dfdb9e1dca69c0af1666686399694a9fa4a1bb2c2aa54a82feca71dcb007cc12f1ac5aef6ae7eff92bb2974f2206b2d1772227e5a58003e628a4103359a60648656242c20001f7003ebcba7af9c4d3430d606b4559265a6da5", 0xca}, {&(0x7f0000000d00)="93c3b1fc95c40b7a39d3811b3cc98f29286d904ca1321076ee45ec1861744528f2c1a5c3b43f802ba7b1f74df77be67c42adaa3196fa217e78c01eefe735a420da1e165675b8c5b3efb94a9a02d16a0bf3bf5e600e07d71fc3d4b2a0dbf89e9953082d8be42ad18126c9cb97451dcddba25954af2d615bba6b43edbe0cdf6045ec3c58ad9bf30f46f1c891b12dfc7e38f8a5fc5d695ad5b883fb2724c35fdcc4eb76ba68ca0a8067139accd9ab5b599f16d9c8321e410d27934f77f4bab4434be4a268ed4c18016747af31ede002f1a679d703358344bbfafc9cc2d9", 0xdc}, {&(0x7f0000000a00)="4173f933888cd809e84f8e813f55bc50fabc73d88867c78359cd0784106dd8a406a81d69c0e05dc04c4ba6e35a8ae33160150e561af400024b760496533a295d7aaec69d39e66b19830ce396335f", 0x4e}, {&(0x7f0000000a80)="1a617227fd74a5d38ac80c76aba43f58414a86868c7b6703c47812e5223d9c7d5340106e28fdc4903cc86b14ba34906af208d5742036b808b9f824fef6dcc881512e12aa32ac6f5bdab7db2ed1e49c76c698ff62b35a5119468bbb95179cd1b59742578b3fbbf369ffa3b62c644f741171192e7125bf0dc5c611287684f1b83106b9230739aeae8c77a924f4ac57341fb7d8d714ec85e3869d00ff54744e44a3240e6abf9b0b1958", 0xa8}, {&(0x7f0000000b40)="120acab162731cfb0e471ca04bcdcca389be4f361bebea75bf0290117c74ee95f6f8ad5c9aa3c1e5ca19403000f9388ad3", 0x31}], 0x7) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, 0x0) kcmp(r4, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r5 = gettid() perf_event_open(0x0, r5, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r6, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r6, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) close(r9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r9, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, 0xffffffd9}, &(0x7f00000004c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x4}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, r8, 0x0, 0x2, &(0x7f0000000340)='!\xa0', r10}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r5, r6, 0x0, 0x0, 0x0, r10}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r2, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xffffffff, 0x5}, 0x0, 0x0, &(0x7f0000000280)={0x5, 0x3, 0x200, 0x192a}, &(0x7f0000000300)=0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0xfff}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r3, r2, 0x0, 0x2a, &(0x7f0000000400)='\x00\x00:c\xc2\x81\x00\xe1\xcd\xcaG\xba\xf852n \x00\x00\x00\x00\x00\x000\x14\x9c\xcd\xf2\xde\x9e\xad\x82\f \xae\xef\xf2\x8d\x00\x82\x1d\x93'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000443) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r11, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @empty}, r12}}, 0x48) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) [ 626.069717][ T27] audit: type=1804 audit(1583528789.936:2425): pid=17745 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/238/file0/bus" dev="ramfs" ino=70254 res=1 [ 626.116141][T17745] Process accounting resumed 21:06:30 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xc0045878, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:30 executing program 1: r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d80000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000008c00128009000100766c616e000000007c0002800600010000000000640003800c00010006000000f50000000c000100e0ffffff040000000c0001000400000000f8ffff0c00010000040000000900000c00010006000000080000000c00010070000000010000000c00010008000000080000000c00010002000000050000000c000200100000001300000008000500", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="14001400726f7365300000001b6234d41734fadd"], 0x7}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind$nfc_llcp(r6, &(0x7f0000000180)={0x27, 0x1, 0x1, 0x2, 0xae, 0xdf, "d403609011391fad000efeb15c6876968dae299ffacfbbebd5a9d3f441bdfdcbeecccac3881256a3442190f10df906260056e873dbbe250cfaa70c6840bedb", 0x9}, 0x60) 21:06:30 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0xff02006c, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000008000001201", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f00000004c0)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8100, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000080)={0xc, 0x1}) [ 626.639145][T17750] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 626.669126][T17750] team0: Device ipvlan1 failed to register rx_handler 21:06:30 executing program 2: accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @default, 0x0, [@null, @rose, @null, @bcast, @default, @netrom]}, &(0x7f0000000040)=0x40, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="978ede11896352a4d76369c16c6352030000000000000044060f4fe51f0d"], 0x3c}}, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 21:06:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000000c0)=0x10004010, 0xffffffffffffff7d) writev(r0, &(0x7f0000000100)=[{&(0x7f00000007c0)="580000001400192340834b80043f679a10ff00804824ca945f640094000500289d5aaa000000000000008449bb06d383d537b300f0fffeff2c707f8f00ff200000000010000100090a00"/88, 0x58}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 21:06:30 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xc01064b5, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sysinfo(&(0x7f0000000300)=""/131) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) r3 = accept4(r1, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80, 0x80800) connect$l2tp6(r3, &(0x7f0000000180)={0xa, 0x0, 0x8, @loopback, 0x16800000, 0x2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)={0x18, 0x140f, 0x8, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040800}, 0x40000) fcntl$addseals(r5, 0x409, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000300001000000000000000000000000014800010025000100090001006d706c7300000000300002801c00020000000000000000000000000000000000000000000000000008000500000000000500070000000000040006005148dcb4f528f739f1d074827c9f7a6fd5056651b67bcf43d5695e35f7c7ec9f11fd67e9c46f8175a0128dd060ee46739f7ac067a6982ae64495e4c2a90807b23de384e22a0565cecad9d91e812e21ff2e921e525fb3b2216ed293ca351fb86b7f8a7fad4338d27b20d1a4820a8a6b90b088081856c98a5e"], 0x5c}}, 0x0) [ 626.846692][T17785] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 626.862904][T17785] @: Device ipvlan1 failed to register rx_handler 21:06:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000040)="9e", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr="a807f27ec0c57e674dc5f8bbc1254502"}, 0x1c) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x409000, 0x2) ioctl$TIOCSTI(r1, 0x5412, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1f}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x11, &(0x7f0000000000)={0x1}, 0x8) 21:06:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff00000010000100000000001e000000fffffffd", @ANYRES32=0x0, @ANYBLOB="e8e5f7e92c6b35f667b92fa52163f5f1faedc7c534578e75f275433e87d1ccc87da49bc775221fefeaa3b41f8c9e1105cbae5c0665634d51b3d583f2503d793b08674898ee0f2fe256988ffbf26ffb678c55408408c0b0b5456c91e4f181bc0994018248cf0732151b6392bfde0ab27528"], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa8, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bond\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:xserver_misc_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:framebuf_device_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4001}, 0x50) [ 627.190889][T17797] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 627.213183][T17797] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.4'. [ 627.269253][T17787] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 627.291833][T17787] @: Device ipvlan1 failed to register rx_handler 21:06:31 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xc0189436, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:31 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, 0x0, 0x0) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) socketpair(0x1a, 0x1, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r4, &(0x7f0000000200)=@abs, &(0x7f0000000180)=0x6e) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r6, &(0x7f00000002c0)=ANY=[], 0x12e) sendfile(r6, r6, &(0x7f0000000140), 0x7fff) 21:06:31 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xc020660b, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:31 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x200000000801, 0x0) write$uinput_user_dev(r3, &(0x7f0000000c80)={'syz1\x00', {0x0, 0x0, 0x5}, 0x10000}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = pidfd_getfd(r5, r7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r8, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x583, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x7, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x0, 0x25, 0xc1}, &(0x7f0000000100)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x8}}, 0x10) 21:06:31 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") read(r0, &(0x7f0000000040)=""/119, 0x77) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r1, &(0x7f0000847f95), &(0x7f000089b000)}, 0x18) r2 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) 21:06:31 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xfb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x25, 0x5, 0x18) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000700)=""/151) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) r4 = openat$nvram(0xffffffffffffff9c, 0x0, 0x100, 0x0) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000140), 0x2) r5 = socket$inet6(0xa, 0x3, 0xfb) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vxcan1\x00', r6}) ioctl$int_in(r3, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) r7 = perf_event_open(&(0x7f0000000c80)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4}, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000600)="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") ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000c00)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x5, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, 0x8, [@default, @null, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}) fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) clone(0x80000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000500), 0xffffffffffffffff) 21:06:31 executing program 0: memfd_create(&(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x00\x00\xfa\xfc\xe6s\x89\x9b', 0x0) clock_gettime(0x4, &(0x7f0000000080)={0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000380)={0x0, 0x2, 0x4, 0x80000, 0x120, {r0}, {0x5, 0x8, 0x0, 0x3f, 0x0, 0x0, "25277ef3"}, 0x5, 0x0, @fd, 0x8}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f000045fff8)) clone3(&(0x7f0000000400)={0x29000700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) 21:06:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x59}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000080)) 21:06:32 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xc0481273, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 628.151061][T17833] input input7: cannot allocate more than FF_MAX_EFFECTS effects 21:06:32 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x40, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000140)=0x1, 0x4) clock_nanosleep(0x9, 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0) 21:06:32 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x88, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) fcntl$notify(r1, 0x402, 0x21) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000001240)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1401, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x4a00) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x400c00) 21:06:32 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xc0585609, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:32 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x2b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8001}, 0x0, 0x1, r0, 0x0) syz_open_dev$admmidi(0x0, 0x100000000, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblcr\x00'}, 0x2c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) 21:06:32 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x3000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0x5ba09f51) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000240)) read$FUSE(r2, &(0x7f0000000380), 0x1000) syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 628.834864][T17833] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 628.932487][T17832] 8021q: adding VLAN 0 to HW filter on device bond0 21:06:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c00000800028004001300"], 0x38}}, 0x0) 21:06:32 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0xc0945662, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:33 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000300)) pipe(&(0x7f0000000300)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000180)="b9800000c00f320f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c4e21903a05d000000c7442406000000000f011424f30f090f013a360f06c4c141f683b0a2e5a666baa100ed", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getpid() r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$isdn_base(0x22, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{r4, 0x148}, {r5, 0x18a}, {r7, 0x220}, {r8, 0x6180}, {r9, 0x8000}, {r11, 0x2}], 0x6, &(0x7f0000000380)={r12, r13+10000000}, &(0x7f00000003c0)={[0x1]}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) [ 629.260428][T17877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:33 executing program 1: pipe2$9p(&(0x7f0000000080), 0x84000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r4, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r4}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r4, 0x4) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@nodiscard='nodiscard'}]}) 21:06:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x100) ftruncate(r4, 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="f0"], 0x1) sendfile(r5, r5, &(0x7f0000000240), 0x7fff) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000080)={0x28}, 0x28) 21:06:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x43002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(r3, r1) setsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f0000000100)=0x4, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000200)={0x25cf, 0x1c, [{0xe, 0x1}, {0xf}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0xa}, {0xa, 0x1}, {0x0, 0x1}, {0x6}, {0xc, 0x1}, {}, {0xa, 0x1}, {0x6}, {0x2, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x8, 0x1}, {0xd}, {0x6}, {0x7, 0x1}, {0x5}, {0x8}, {0x2, 0x1}, {0x8, 0x1}, {0x9, 0x1}, {0x9}, {0x9, 0x1}]}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x36042, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r10, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r10}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000280)={r10, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x43}}}, 0xffff, 0x5}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={r11, 0x9}, 0xc) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x2, r4, 0x1}) 21:06:33 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x400000) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 629.761380][T17885] kvm [17880]: vcpu0, guest rIP: 0x187 disabled perfctr wrmsr: 0xc1 data 0x0 [ 629.785774][T17885] kvm [17880]: vcpu0, guest rIP: 0x187 ignored wrmsr: 0x11e data 0xbe702111 [ 629.822368][T17885] kvm [17880]: vcpu0, guest rIP: 0x187 disabled perfctr wrmsr: 0xc1 data 0x0 [ 629.840492][T17886] XFS (loop1): Invalid superblock magic number [ 629.851656][T17885] kvm [17880]: vcpu0, guest rIP: 0x187 disabled perfctr wrmsr: 0xc1 data 0x0 21:06:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="66cf"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRES16=r2, @ANYRESHEX=0x0], 0x3}, 0x1, 0x0, 0x0, 0x40011}, 0x4040004) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x10c}}, 0xd0) rt_sigreturn() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, r7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:34 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x51a000) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:34 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_open(r3, 0x0) r4 = dup(r0) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000040)=0xe0ed) 21:06:34 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x1c, r2, 0xb0343aabd1184b87, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) 21:06:34 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x9}, 0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getpeername$inet(r2, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f00000001c0)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000000), &(0x7f00000000c0)=0xe) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x42000, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x22, &(0x7f0000000240)="1619c329a6f938b1c7fb2ca0d3254135a1a9ee0ae62dac90702b5cf55ffddcf274a4216cfc78285bf5287ee0eac8a3c19f24c6714372ba10e9540b12dc6d1d62ec32be841f00b0d86ccb", 0x4a) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={0x0, 0x0, 0xfff}, 0x8) 21:06:34 executing program 2: socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$dsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x4010, r3, 0x0) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010f0000000000408ccb08279d1909f27bc70ab1286c0000000800000030000180060002000000000014000300000000004c0000e0000000ffffac1414aa06000400000000000600010002000000f53b76f9330a81e2287a7fc7b71377322ab2f2ed1a7bd512c6547ca9fb221f49b411dfffaf6cac38ed61aaa49b9d68a3dd8182de94c78d8a4e7af5778b1941411b472cdf238d52610472ba4a8475f30c7739399f1fe2c04e8e3d73cc3d170fd5f7fa76deecb859f8e78633d4bfb52fd627fb63acab00d59441a50ed315f41bb8ed6d"], 0x44}}, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c01da2b15a1cc4c3871844ff50600", @ANYRES16=r6, @ANYBLOB="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"/406], 0x19c}, 0x1, 0x0, 0x0, 0x20004044}, 0x801) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x144}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x44040}, 0x20000001) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f2, &(0x7f0000000000)='ip6gre0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r11) getsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) r12 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x8, 0x200000) ioctl$SNDCTL_DSP_GETTRIGGER(r12, 0x80045010, &(0x7f00000003c0)) 21:06:34 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800050000300000000000299078ac1e0001ac1414aa04009078000000004500648e5fb10000000000007f0000017f000001"], 0x0) 21:06:34 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x722000) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x809c}, 0x20000001) r4 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@fat=@check_strict='check=strict'}, {@shortname_winnt='shortname=winnt'}]}) 21:06:34 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000000)=0xa2ea) r2 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x80) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000080)) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000300), 0x12) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) lstat(&(0x7f0000001500)='./file0/file0\x00', &(0x7f0000000300)) socket$packet(0x11, 0x2, 0x300) 21:06:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x7, @sliced={0x6, [0x3, 0x0, 0x1, 0xacc, 0xcd6, 0x8, 0x8, 0xd6b, 0x1, 0x7, 0x8, 0x5, 0x40, 0x4, 0x63, 0x4d9d, 0x9, 0xfffe, 0x3, 0x4d, 0x4, 0x5, 0x8f7, 0x7ff, 0x8, 0x0, 0x7f, 0x7, 0x400, 0x40, 0x3f, 0x7f4, 0x7, 0x6, 0x7fff, 0x80, 0x1f, 0x1, 0x3f, 0xb9e, 0x1f, 0x6, 0x3ff, 0x37, 0x4, 0x3d, 0x6, 0x5d], 0x401}}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}}, 0x0) [ 631.214344][T17947] ubi0: attaching mtd0 [ 631.263001][T17950] FAT-fs (loop4): bogus number of reserved sectors [ 631.265724][T17947] ubi0: scanning is finished [ 631.300601][T17950] FAT-fs (loop4): Can't find a valid FAT filesystem [ 631.329024][T17956] tipc: MTU too low for tipc bearer [ 631.340614][T17958] tipc: MTU too low for tipc bearer 21:06:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="e49ae6f0b439a77e5685b58296ab67ca5ed9280418d1e0c4e9bee33c4f1d647766c37b73c3f6aa4d61b4bfddadb30b8f7c7d12046cdd19296ff9daf937a881b2e8fc906705d0954288ae60173ada9a2a19c1d6efe6df496d6bd646342ec5a73acc7904e6ea5fa7dc845b431b6bd81d9614eb9f450745da2ac873e62594dac068f9e9625fcee2203c8f42a2c2f87d8b2583e78faf95f23c4beb92b1c933c176277fa53008ec9d71428f219143ba3f57827f07b0b7fec8a86e5f0d67f5829ae805419b5c57071eb132fb37375bf63a67a16271f5093a08d7c3617acc91d9346bdfe3b4ca082333a28fe957", @ANYRES64], 0x2}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @dev={[], 0x11}}, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0xfffffffffffffffe, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x84, 0x0, 0x0, 0x0, 0x9a, &(0x7f00000001c0)='veth0_to_bond\x00', 0x7f, 0x1, 0x2}) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80e, 0x2403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) [ 631.413540][T17959] FAT-fs (loop4): bogus number of reserved sectors 21:06:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000000005e"], 0x48}}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r11, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) bind(r7, &(0x7f0000000080)=@ll={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x80) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r11, 0x0, {0x2, 0x1, 0x2}, 0x1}, 0x18) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)={0xec, 0x464, 0x200, 0x70bd27, 0x25dfdbfd, "a40a02830c760a342e0ec1f102e607115ae46fb6e4dcd3f764590ef7c4357f95f38697d8051182ba593363e5e00dd4c1098ad07cc5ac070200d11879b8807f59e50514fd367cd574f46d97d28d90463943c114f628d87b12f6c88c8794e7bdce5b876c61e33ac2201f665aaf195c03684f262a566db055c95570d93330d33b9e4ab61d3265dfde99f8483ecfc70e8563d96786f99202b4e73161832a592b20f14a3d659f4aa80d7022ddcbb0ebca14acc00f2a7009be1cdd7db40583baa88867dfb6e31d9be4ec9456457d16b156bb29990fc8295ea3165c94", ["", "", "", "", "", "", "", "", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x20080884) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}]}}]}, 0x3c}}, 0x0) [ 631.493564][T17959] FAT-fs (loop4): Can't find a valid FAT filesystem 21:06:35 executing program 3: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r2, r0, 0x0, 0xfff) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x34e, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_PPC_GET_SMMU_INFO(r10, 0x8250aea6, &(0x7f0000000200)=""/127) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21:06:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) getpid() accept(r0, &(0x7f0000000240)=@rc={0x1f, @fixed}, &(0x7f00000002c0)=0x80) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x22801) io_setup(0x3, &(0x7f0000000000)=0x0) dup3(r1, 0xffffffffffffffff, 0x0) io_submit(r2, 0x0, &(0x7f0000000240)) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = dup3(r3, r1, 0x0) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000580)={{{0xc, 0x1}}, 0xd5, 0x249c, &(0x7f0000000480)="aa518cd2543f91d0f57d477baf983a30c444c48716acb28001ca8337f4640e8a56fc3078c56aad113f4549d61a576a270c9b1cfd6c8eedeb89339db5a51251f88aed66ab8de9edc259bbdf0211dc77eedc7bda3c66856480045363fb895a22ad6c83aae2e6ca5af0508f4a9cb49821527bddadc7f7882abebc05e1a387dbd10bb0aa80f3ae3b54ef66d9087c8dc6be9d095168c561d89278b78071a978178f0f5c0fec807e68c6a8fcfdc43dae1001c4a332ee4ed09b94d03cf4dd2a4858351759f207eef4be55c68f850c39890cca528acbad267b"}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8), 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4115a8dc1d41dfa7, 0x0) recvmsg$can_bcm(r8, &(0x7f0000000200)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/116, 0x74}], 0x1, &(0x7f0000000380)=""/251, 0xfb}, 0x40000040) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x7d, &(0x7f00000001c0)={r7}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) connect$pptp(r9, 0x0, 0x0) unshare(0x40000000) [ 631.717358][T17947] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 631.744349][T17947] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 631.776669][T17947] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 21:06:35 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, &(0x7f0000000200)={{0xffffff92}, {0xc0}}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x80000) getsockname$llc(r4, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10) r5 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 631.990528][T17947] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 632.105154][T17947] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 632.120464][T17947] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 632.129166][T17947] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 285364111 [ 632.139886][T17947] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 632.158716][T17974] ubi0: background thread "ubi_bgt0d" started, PID 17974 21:06:36 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$inet(0x2, 0x1, 0x9) sendto$inet(r3, &(0x7f0000000080)='7', 0x0, 0x400c0c1, &(0x7f0000000000)={0x2, 0x4e1e, @broadcast}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r2, r4, 0x0) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) [ 632.490105][T17984] IPVS: ftp: loaded support on port[0] = 21 [ 632.539110][T17947] ubi: mtd0 is already attached to ubi0 21:06:36 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x770000) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:36 executing program 3: socket$kcm(0x29, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2001) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xe32}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20140, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x3c, 0x0, &(0x7f0000000200)="e460cdfbef24080000000a9386dd6a000000000704eb3014cd3ec8a755c1e1380081ffad000000e8d5000000010000001400000500242f09880bd320", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000050}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffe6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000280)=0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x4020940d, 0x400007) close(0xffffffffffffffff) 21:06:36 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x400000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000600)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) [ 632.921174][T18004] ubi: mtd0 is already attached to ubi0 21:06:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='geneve0\x00', 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000080)={0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a090a, 0x1, [], @value64=0x70e5}}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) [ 633.047705][T18010] IPVS: ftp: loaded support on port[0] = 21 21:06:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xac, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0xa8e, 0x5, 0x81}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x7}}, 0x10) [ 633.092452][T18004] ubi: mtd0 is already attached to ubi0 21:06:37 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0xb70000) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 633.266657][T18029] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! 21:06:37 executing program 3: ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x8, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000000080), 0x72a, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(0xffffffffffffffff) 21:06:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x6, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x28}}, 0x4004800) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe, 0x1, 'ip6erspan\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x18a}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x6c}}, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x800000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004894) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 21:06:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmdt(0x0) shmdt(0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000100)={0xffffff54, 0x5, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvfrom$l2tp(r3, &(0x7f0000000000)=""/63, 0x3f, 0x60, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x404}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x0) [ 633.494537][T18038] ubi: mtd0 is already attached to ubi0 [ 633.707306][T18038] ubi: mtd0 is already attached to ubi0 21:06:43 executing program 4: syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x5, 0xc0002) socketpair(0xb, 0x6, 0x3, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c, 0xc00) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e21, 0xffff, @rand_addr="4d28251c87e1b5b4b12af1a7ad7a2b71", 0x9}, {0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000}, 0x9, [0x5, 0x3, 0x7, 0x100, 0xfffffffa, 0x7, 0x6, 0xffff]}, 0x5c) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x101800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$RTC_VL_CLR(r7, 0x7014) r8 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r8) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x2a2b0400, &(0x7f0000000100)="948d19f0559f9153fcc94923d3a6031a974951b848dce6475e1d36323020e7a9134e0f54c84e10956a4e69889741d09ed4c03d349528ab52fc10ff34b3", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)="2e6337b181d62823f702f997c2b67520240e9446d8c01114c4d8a85d5bec29d90c495a46d0449a8d742fecfd7054ee1e27169b23de5e8f5728794cb12d9d0ef736fe41fc167911ac07f473d9a49b610a567542e3281a253ae936fc3c75dadf60e32f8d70") 21:06:43 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x20000000) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:43 executing program 0: r0 = getpid() openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200002, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='security.apparmor\x00', &(0x7f0000000180)='user-\x00', 0x6, 0x7) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x40000, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) fcntl$setownex(r2, 0xf, &(0x7f0000000280)={0x2, r3}) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$RTC_PLL_GET(r9, 0x80207011, &(0x7f00000002c0)) write(r4, &(0x7f0000000600)="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", 0xe00) fallocate(r4, 0x11, 0x0, 0x10000) sendfile(r4, r5, 0x0, 0x12000) syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000009a00)) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f00000000c0)) 21:06:43 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x36, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8a001, 0x0) write$P9_RSTATu(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="9400e1ff86c4ee06a505cfe1c3135019f8c0c7ad01f37f503d9146138538d15159e8a88c46653aacdaac06e7ecf311a69c8da0bb"], 0x34) 21:06:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x200000000001, 0x1) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040)={0x2f, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 'lblcr\x00', 0x4, 0x6, 0x52}, 0x2c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 21:06:43 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xc0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x9, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x2}, 0x0, 0x0, &(0x7f00000001c0)={0x1, 0xd, 0x9}, &(0x7f0000001200)=0x23a9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=0xb346}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cgroup.controllers\x00', 0x2761, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000001400)={0x900000000000000, 0x0, 0x0, 0x3, 0x5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f000000ad80)={r1, 0xc0, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ab80), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac40)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac80)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xfffffffa, 0x9, 0x10000, 0x7ff, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f00000013c0)={r7}) bpf$PROG_LOAD(0x5, &(0x7f000000adc0)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180310e8003b628a1ab6002000080000000000010800000000774f7c0000000000dd2c71"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000ab00)={0xa}, 0x8, 0x10, &(0x7f000000ab40)={0x0, 0xd, 0x7, 0x3}, 0x10, r4}, 0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x5, &(0x7f0000001380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_val={0x18, 0x9, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x50}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x7, [], 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 21:06:43 executing program 2: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="002e0000000000001cf111800983cb000023000000ff7c330f0351c864"], 0x3c}}, 0x0) [ 639.571381][ T27] audit: type=1800 audit(1583528803.436:2426): pid=18087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16833 res=0 [ 639.591748][T18084] ubi: mtd0 is already attached to ubi0 21:06:43 executing program 1: r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000bc0)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)8\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00Tk\xc3\xab \xde\xae^\xa8>\x00\x1b=\xf0j\xb85\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\xc0\r\xc1N\xb77\x82\xd8\x99\x97<\x92V\xf3t\xa5\xc8\xb0H\xcbL\xf5\x18\x1e\x12\x04\xca\x03\xcf\x9b\x94E&\xd0w\xc4k\x13\xd8\xe2T\xfb-e\x9c\xb5\x99\xaf\x1fL\xa0u7P\x96:y\x91\xf0n4\xc3\x05\x12\xc20\xf0\xdd\x1a\xfe\x91p\x0f\x1br\xfe\xe0Y/\x96(\xd9K\x9b\xf9\xefb\xf0\x83o\xe0\x86\xa8F\x17\x84\x1c\xfe\xfb0\x99Sg\x1f\xf2Kk1}\xdb\xe8]\xe7{W\x96\xca\xb0o`\xe6b\\$\f\xe2\xaf\x96\xb8\x93N|\xd1\x04\x1eN\xb6YI8\xd6nM&(\xa2q;\vG\xe3\xf5\xcd6 \x89\v\xf5\xb4y\xf9\x1b\x84n\xf6Z\x12\xe6\x11\xb9 e\xa1\xd8\xa0VA\t\xe5}k\v\xeb\xd46\x9f\x1a\xe2(\xab\xf0|\x1d.\x188f\xba\xff\x01\xafi\xc3\xbc\xe6 \xa5\xf2\x19$>\x92\xb2\xb0K.Po\xc9\xc8\xcdz\xe6c \xef\x14D\x9c\x03\xb1\xd7Y\xe07pr(\xfd\x9a\xee-\x01\x93g\x96\xda\xc7\a\xa0d\xe8\xa1\x1f\xf7\xb9\xad;\xafN{r\x86+\xb4\xca\xd0\xdd\x93\x90\x16\x03\x00\x00\x00\x00\x00\x00\x00\xf7\xf1\xec\xadrU\x82\xbcg\f8\xdf\xd5\xd1c\x8e\x12:\x9c\x00\x00\x00\x00\x00\x00\x00\x00\x8fM\x88\x9c\xa5M\xa3\x94\x8cb\x96^\x8b\xac\x9d\xb7\x15P>:Nf\xdb\xfdr\x7fj\x1e\x7f\xce\xf0\x1en\x1ckI^I\xfe', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}}}, 0x90) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x2f}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, &(0x7f0000000000)) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r11 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in=@broadcast, 0x4e23, 0x83, 0x4e24, 0x2, 0x2, 0x0, 0x20, 0x5e, r10, r11}, {0xb6, 0x0, 0x9, 0x4, 0x7fff, 0x7dd8}, {0x3, 0x3, 0x5f2, 0x10001}, 0x0, 0x6e6bb8, 0x1, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x22}, 0x4d6}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3506, 0x4, 0x0, 0x80, 0x72fa, 0x3d, 0x8001}}, 0xe8) fallocate(r5, 0x10, 0x0, 0x10000101) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x10000101) [ 639.696975][ T27] audit: type=1804 audit(1583528803.566:2427): pid=18095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir862453865/syzkaller.RfLa6e/256/file0" dev="sda1" ino=16833 res=1 21:06:43 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) listen(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) open(0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f00000001c0)={0x0, 0x0, {0x4, 0x0, 0x10000, 0xfffffffe}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000780)=[0x0]) [ 639.749678][T18084] ubi: mtd0 is already attached to ubi0 [ 639.822141][T18101] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:43 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7fffffffefff) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 639.932989][T18105] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 21:06:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f00000005c0)={0x5, 0x2, 0x7a634104, 0x4, 0x6, 0x2}) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x450, 0x3f3, 0x20, 0x70bd2c, 0x25dfdbfb, {0x3, 0x1, 0x3, [0x5, 0xffffff7f, 0x6, 0x2e, 0x4, 0x9, 0xfffffe4c, 0xfffffffc, 0x80000001, 0x6, 0x5, 0x2, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x6, 0x9, 0xdf, 0x200, 0x800, 0x7, 0x479, 0x1, 0x1f, 0x0, 0x1, 0x8, 0x8, 0x1de, 0x7f, 0x4, 0x7, 0xd18, 0x7, 0x7fff, 0x8dfb, 0x3716, 0x0, 0x6, 0x5, 0xff, 0x2, 0x3, 0x61f, 0x3fe00, 0x12f, 0x0, 0xffffff00, 0x1, 0x3f, 0x7, 0x7, 0x1, 0x5, 0x8, 0x100, 0x10000, 0x80000000, 0x2, 0x1, 0xcd29, 0x7, 0x4], [0x0, 0x1, 0x2, 0x7fff, 0x7, 0x4, 0xde1a, 0x5, 0x5c, 0x81, 0xff, 0x8, 0xba61, 0x1f, 0x8, 0xca0, 0x7, 0x0, 0xffffffff, 0x3, 0x9, 0x1000, 0x2, 0x7ff, 0xffff, 0xfd9d, 0x5, 0x2, 0x78, 0x4, 0x3, 0x9, 0x3, 0xffff, 0x423f626, 0x0, 0xffffffe1, 0x0, 0x27, 0x1, 0xb20, 0x4, 0x637, 0x2, 0x1000, 0xebfe, 0x6, 0xb2c, 0x1, 0x8, 0xfffeffff, 0x9, 0x80, 0x7f, 0x1110, 0x0, 0xcf, 0x80, 0x7, 0xfffffffd, 0x3f, 0xfffff365, 0x3f, 0x524], [0xa3c, 0x7, 0x0, 0x10001, 0x9, 0x5, 0x0, 0x5, 0xffffffff, 0x3, 0x4, 0x7, 0x80, 0x2, 0xfffffffc, 0x7fff, 0x63e, 0xfffffffb, 0x7fffffff, 0x8, 0x3, 0x6, 0x40, 0x7f, 0x1, 0x8, 0x6, 0x21e, 0x5, 0x5, 0x5, 0x4, 0x94, 0x80000001, 0x9, 0xfffffffd, 0xfabe, 0x7, 0xd8efaeb, 0x6e, 0x584863a6, 0x7, 0x8, 0x8, 0x20, 0x8, 0x0, 0x11ff, 0x7ff, 0x0, 0x6, 0x6, 0x8, 0x1, 0x10001, 0x1f, 0xfff, 0x81, 0x1ff, 0x9, 0x7, 0x7, 0x7, 0x10000], [0x5, 0x9, 0xffffffff, 0x3, 0x2, 0xffff, 0x8, 0x1, 0x1, 0xffffd85e, 0x5, 0x0, 0x8, 0x8, 0x40, 0x2, 0xffff0000, 0x8, 0x0, 0x628e, 0x9, 0x9, 0x4, 0x5, 0x3, 0x7fff, 0x7, 0xfffffffa, 0x5, 0x1, 0x7fffffff, 0x4, 0x0, 0xc30, 0x3, 0xffff, 0x5, 0x0, 0x1, 0x0, 0x705536f0, 0x1, 0x1, 0x5, 0x3, 0x7f, 0x8, 0xf2, 0x9, 0x3d, 0x7ff, 0x1, 0x80000000, 0xffff, 0x401, 0x4, 0x1, 0x1ff, 0x7, 0x200, 0x6, 0x8001, 0x4, 0x3], 0x2f, ['!vboxnet0procposix_acl_accessposix_acl_access$\x00']}, ["", "", "", "", "", ""]}, 0x450}, 0x1, 0x0, 0x0, 0x4000080}, 0x14) [ 640.120279][T18106] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:06:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(0x0) pipe(0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8000, 0x6f5e1ed885f5af8b) pipe(0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x7, 0x9cc}, {0x0, 0x1}]}, 0x14, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x8) read$dsp(r0, &(0x7f0000000180)=""/4096, 0x1000) 21:06:44 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) listen(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) open(0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f00000001c0)={0x0, 0x0, {0x4, 0x0, 0x10000, 0xfffffffe}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000780)=[0x0]) 21:06:44 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x55d643, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x593e1c5d8b8bdba5}, 0x10100, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x3}, 0x0, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0) 21:06:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x9, &(0x7f0000000000), 0x4) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0x0, 0x6, 0x0, r2, 0x0, 0x0}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000000c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) creat(0x0, 0x0) close(r1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x1) truncate(&(0x7f0000000040)='./bus\x00', 0x4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) ftruncate(r5, 0x200004) sendfile(r1, r5, 0x0, 0x80001d00c0d0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000040)) 21:06:44 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8a98f714fcd1a42, @perf_bp={0x0}, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="955a088200000000b923d32edef11fbdf5001ed9"], 0x14) openat$cgroup_subtree(r1, &(0x7f0000001480)='cgroup.subtree_control\x00', 0x2, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendto$phonet(r1, &(0x7f0000001240)="3e429911dc49600dee38b1a0880843c91237e877fd168ab3a2aebe3ac87452c4333deb7b5d945786112d0aa8a5e9ec213e8cfe2eadfcfd88548dcc4579b1faa3fae4a1e0517cdf4e4bbc1e6251ca450b904aa8d086541d3bab9abb0d79755edb3ebb4c0a85d6e80e47fcd2abcb0df98e94d005ef10c1ecec3ae813d2b8f61f28284f490b", 0x84, 0x2200c880, &(0x7f0000000100)={0x23, 0x1, 0x8, 0x81}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) [ 640.692163][T18136] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 640.709314][ T27] audit: type=1800 audit(1583528804.576:2428): pid=18100 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16785 res=0 [ 640.739831][ T27] audit: type=1800 audit(1583528804.586:2429): pid=18114 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16785 res=0 [ 640.761763][ T27] audit: type=1800 audit(1583528804.636:2430): pid=18131 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16785 res=0 21:06:44 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f00000002c0)) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000028c77000ffdbdf25090000000800090005ac0f170800090005ac0f00050008000200000008000a00501901500400280011000700291f3858b2612177a86f494c6600000008003700010000006192559a925e24f5232203ac82cc6af18a489ff8"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r6, 0x10, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10000}, 0x8000) r7 = socket(0x11, 0x800000003, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) open_by_handle_at(r10, &(0x7f00000004c0)={0xad, 0x8001, "39abe3158db01c498ae1fcdf54cd5257e7303c6133c394df641b128a9a4fdf1056125abe90db7f1539cc5618801b285ba3ef67786057a2c28de950723f022061eb15f4ac1279b0fa5a68dcb40b63f35838248247757342e0257314ac12d53075fa80911b01ffaa92e0ab0c85308307d7f3313747addb397d8633ce7416955d0e2f52d87ee5478bf54c96faa687a46983b3e3ddd6ee2e184a330aff2afd3809f10dd75838b2"}, 0x400000) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa2e3989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r13, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) bind(r7, &(0x7f0000000080)=@ll={0x11, 0x0, r13, 0x1, 0x0, 0x6, @dev}, 0x80) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @rc={0x1f, @fixed={[], 0x11}, 0x1}, @xdp={0x2c, 0x3, r13, 0x38}, @ethernet={0x306, @random="beb0f9e84b42"}, 0x81, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000000)='veth1_to_team\x00', 0x2, 0x80, 0x5}) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r14}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r14) 21:06:44 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2181, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f00000002c0), 0x24, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00', 0x0, 0xfffffffffffffe5e) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x10000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x2, 0x0, [], [{0x1, 0x7, 0xffff, 0x8, 0x10001, 0x1}, {0x0, 0x2, 0x0, 0x1, 0xc0dd, 0x80}], [[], []]}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, [], 0xb}, 0x7}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xce, 0x681, 0xe71, 0xe0}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000014) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) 21:06:44 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(0x0) pipe(0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8000, 0x6f5e1ed885f5af8b) pipe(0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x7, 0x9cc}, {0x0, 0x1}]}, 0x14, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x8) read$dsp(r0, &(0x7f0000000180)=""/4096, 0x1000) [ 641.039304][T18150] ubi: mtd0 is already attached to ubi0 21:06:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x8, 0x0, 0x5, 0xdcb0e9b83be8cba7, 0x0, 0xb7, 0x8887}) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'sit0\x00', 0x3}) [ 641.251030][T18157] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 641.310626][T18157] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 21:06:45 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) listen(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) open(0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f00000001c0)={0x0, 0x0, {0x4, 0x0, 0x10000, 0xfffffffe}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000780)=[0x0]) [ 641.351347][T18157] F2FS-fs (loop1): Fix alignment : done, start(5120) end(13312) block(7168) [ 641.368189][T18157] attempt to access beyond end of device [ 641.374509][T18157] loop1: rw=12288, want=8200, limit=20 [ 641.381119][T18157] attempt to access beyond end of device [ 641.387064][T18157] loop1: rw=12288, want=12296, limit=20 [ 641.394505][T18157] F2FS-fs (loop1): Failed to get valid F2FS checkpoint 21:06:45 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) pipe(0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bind$llc(r2, &(0x7f0000000280)={0x1a, 0x0, 0x7}, 0x10) sendmmsg(r2, &(0x7f00000001c0), 0x400000000000150, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$mice(0x0, 0x0, 0x640182) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_NMI(r1, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000180)={0xffffffff, 0xa, 0x4, 0x20, 0xfffffff7, {r6, r7/1000+30000}, {0x5, 0xc, 0xfc, 0x3, 0x0, 0x5, "8abb35f7"}, 0xfff, 0x0, @planes=&(0x7f0000000040)={0x7ff, 0x5, @fd, 0x6}, 0xe6}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$MON_IOCH_MFLUSH(r10, 0x9208, 0x7ff) [ 641.508318][T18163] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 641.530485][T18163] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 641.573100][T18150] ubi: mtd0 is already attached to ubi0 [ 641.612870][T18163] F2FS-fs (loop1): Fix alignment : done, start(5120) end(13312) block(7168) [ 641.631126][T18163] attempt to access beyond end of device [ 641.635166][T18168] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 641.700487][T18163] loop1: rw=12288, want=8200, limit=20 [ 641.706535][T18163] attempt to access beyond end of device [ 641.737328][T18163] loop1: rw=12288, want=12296, limit=20 [ 641.774570][T18163] F2FS-fs (loop1): Failed to get valid F2FS checkpoint 21:06:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mincore(&(0x7f0000aba000/0x3000)=nil, 0x3000, &(0x7f0000000280)=""/166) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x6, 0xaa5225bf4e637f16, 0x0, 0x0, {0x6, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4491}, 0x44864) io_uring_setup(0xfbf, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x2ff}) 21:06:46 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) pipe(0x0) pipe(0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8000, 0x6f5e1ed885f5af8b) pipe(0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x7, 0x9cc}, {0x0, 0x1}]}, 0x14, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x8) read$dsp(r0, &(0x7f0000000180)=""/4096, 0x1000) 21:06:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x280, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x1503, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000108840900"/20, @ANYRES32=0x0, @ANYBLOB="ffffff9e0100000028001a00040002002cfe0000040000002500000004000000040000000400000004000000c2fd000008001b0000000000"], 0x50}}, 0x0) 21:06:46 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000180)={0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000240)={0xa20000, 0x5, 0xfc, r8, 0x0, &(0x7f0000000200)={0xa00964, 0x20, [], @string=&(0x7f00000001c0)=0x2}}) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000280)=r9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r10}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r10) [ 642.746589][T18201] ubi: mtd0 is already attached to ubi0 [ 642.875915][T18194] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 21:06:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x7, 0xffffff81}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="000102000000000000005d8979fa62dd08b9"], 0x18}}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r3, 0x8982, &(0x7f0000000040)) [ 643.039313][T18194] 8021q: adding VLAN 0 to HW filter on device @ 21:06:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160555]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f00000000c0)={0x4557, "eea1cf6121ad9ec3bba795636ffb8a0121bbb18c90e015caa86772f3b3b2cdb4", 0x3, 0x10, 0x4, 0x5d, 0x8, 0x4, 0x0, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) mmap$snddsp_status(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) lsetxattr$security_ima(0x0, &(0x7f0000000280)='security.ima\x00', 0x0, 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:06:47 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) listen(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) open(0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f00000001c0)={0x0, 0x0, {0x4, 0x0, 0x10000, 0xfffffffe}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000780)=[0x0]) [ 643.235977][T18194] net_ratelimit: 4 callbacks suppressed [ 643.235986][T18194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 21:06:47 executing program 3: r0 = socket(0x1e, 0x1, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff, 0x0, 0x0, 0x1000}, 0x10) write(r0, &(0x7f0000000000)="1c0000004a009b8814e5f407000904000a0000000000000001000000", 0x1c) [ 643.407761][T18220] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:06:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000003000000bfa300e57c0000000703000000feffff7a0af0fff8ffffff79a4f0ff000000b7060000ffffffff2d6405000000287eb3c21195b8000065040400010000000404000001007d60b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffff6e, &(0x7f0000000100), 0x123, 0x0, 0xffffffffffffff8d}, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0xfffffffffffffffb, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000140)={0x1762cdd5, 0x93a, 0x2, 0xbf16, 0x8}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x400000000004c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x420000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='bond0\x00') 21:06:47 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x0, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086201, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000140)={r2}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 643.756380][T18231] ubi: mtd0 is already attached to ubi0 [ 643.910766][T18231] ubi: mtd0 is already attached to ubi0 21:06:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x46, 0x0, "0000000000000400"}, 0x22b) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1a2d9, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000000)="ee04a0faae675571993a13390a4266f051808cfb0cd58b2e262dc2b026973eee8acee42a910fb1699002d99d44a9bd1cedff77a96e361b2d1757f39c42553397a06fbc55e4bd6ee44562a94ab3d235d4c73676b9723058b78d6b20c3dcc8da70ff8737d1516180ef24ded502f30761a6047e843814475f24f2f69e3b325394d52e4d486b5b") sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 21:06:47 executing program 0: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x8}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x920, 0x0) write$6lowpan_enable(r1, &(0x7f0000000280)='0', 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f00000000c0)="e8eabf6eed75273962b1fc6a6cfa0e23ce545bffb69b22e5c722a10161c492bb0a51b97737a5ee08b678b638767fd06abded756ffe5060da06de0e9f658228cce5060e0b0b98280034ff66fc01449fb88a97114e6f7b34747fb2527f3c522e0c63a1719ba8c793e6785548e9cfa1419a6cfa8f3a24dcaaef44780212cf30918c7d91349c142b0e40ad7e4f5a26ccd4840ba3c3c5d96a96c9cd4b5d44e3ba760a6b576911c7622f442c22991b6eec19b816683814c6368c32ecdccb16b7"}, 0x20) syz_mount_image$nfs(&(0x7f00000002c0)='nfs\x00', &(0x7f0000000740)='./bus/file0\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000340)="2f50517d256583ff0b", 0x9, 0x38aa}, {&(0x7f0000000780)="32b6ca36d09d7f507306cd61aa305dd27e3775f2f19431622e57a5c992f0b152faf8f7abf0ea113f76fd0597a7988b5880be5863aebd4f5e9b946d2286efd0cf887ab1913d0225588846810039fcb557db2ae38b094e244766c320a55fe4aa9c9b521c1976002d95f8bde07e2595b408e2fd528dbb6267a810ccdf7651a6022b59c99d63ec4549dcd9d6ba78dd816f5e2d93cf629bcd83ddffc36f5e9d17b4b1cc6bb425d54888b264b47b77b16f731c609b4fb393c498cf47259fee962a85eeb21f3ee0b58f8c08894bd34ccddb4c8abf5121648ad1dd6858c9b3d735d22ffff6e8c0074a04c7e84ef394b3f3a4", 0xee, 0x9}, {&(0x7f00000005c0)="cdc40e04cf8bdbf2fff29317925f13393072f0cf4e64c4d9cd96457aaf48fed2e5c88e9121841dbbd0fc32578adb39b7caffc72cfca3030d76ab275c655061bdb84c4084a2caff36e0a8209fb31585a501bf2f109726907874f4dc90877139383d00961480222e121f3750e7443acd07ce73441266f63becd15b7875d59fb24cbaef6c0a2293020b99856a3f3315702eed6150471e5e81fbf928897ea074c86a46924d9c67411a4ce7786e672e4cf6aad87e02713f983f26bafc5e91d87bcc5fc0be53f5da82b44123a3a2627c490eb25fbf30dc5b0c32803c2d3fe20f4654e382d8f14fe1deb8e50d7bdb8e75350361d02e0e44123d5c42025955081c0e5b5b4d866f856ba472aa8d701a2d93cfec28d344755e38d6a377", 0x118, 0x80}], 0x840, &(0x7f0000000700)='ppp0\xabvmnet1\x00') setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000480)='./bus/file0\x00', 0x40c501, 0x186) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000300)={0x2, 0x400}) getsockopt$llc_int(r5, 0x10c, 0x8, &(0x7f0000000080), &(0x7f0000000200)=0x4) 21:06:47 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c20000000180c20000000800450000380000000000019078fffffffcac1414aa05009078ffffffff45000000000000000032000000000000ac1414aac5a30262397fcad2cc7b6b8664d14db687553f1eeb84c8610832e1fb03bf81d211296ce1c42449edf63615a4ed6d0a3f247ea340439a36dace5d05f1975c1fef73f1ffab83b18006008e22a742f30074bdb49b802335747ef1bd28629fa9c3a415630aeb6caf79e2a26babc75b465c29dd039e5836d03ba000b588200c9ccd893daac4b9"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r4, 0x7a9, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x6, @rand_addr="3e1db70ba83f959f584c013549539f73", 0x3}}}, 0x118) 21:06:47 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = pidfd_open(r3, 0x0) fcntl$getown(r4, 0x9) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r5}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r5) 21:06:48 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) listen(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) open(0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f00000001c0)={0x0, 0x0, {0x4, 0x0, 0x10000, 0xfffffffe}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 644.260280][T18252] ubi: mtd0 is already attached to ubi0 21:06:48 executing program 1: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000001ac0)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7ffe) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000003, 0x12, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000040)="77690affffcd1fbb66ec", 0xa}], 0x1, 0x4) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) [ 644.355818][T18262] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 644.397971][T18252] ubi: mtd0 is already attached to ubi0 21:06:48 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) listen(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) open(0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f00000001c0)={0x0, 0x0, {0x4, 0x0, 0x10000, 0xfffffffe}}) 21:06:48 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r1, 0x8001}) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r2}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r2) [ 644.716087][T18279] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 644.773842][ T27] audit: type=1804 audit(1583528808.646:2431): pid=18285 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir155574278/syzkaller.MQBWfj/217/bus" dev="sda1" ino=16977 res=1 [ 644.807591][ T27] audit: type=1804 audit(1583528808.676:2432): pid=18280 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir155574278/syzkaller.MQBWfj/217/bus" dev="sda1" ino=16977 res=1 21:06:48 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) listen(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) open(0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) 21:06:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x41c1, 0x11088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000900)={0x4, 0x3, 0x4, 0x1, 0x8, {}, {0x4, 0xfda9f7a6dea1abca, 0xfd, 0x1, 0x1f, 0x20, "46d1a2df"}, 0xfb227d9, 0x1, @userptr=0x5, 0xffff7848, 0x0, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000640), &(0x7f0000000980)=0x4) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1, 0xffffffff}, r7, 0x200000}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback, 0x111a}, {0x2, 0x0, 0xffffffc1, @dev={0xfe, 0x80, [], 0x16}}, r7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) keyctl$dh_compute(0x17, &(0x7f0000000580)={0x0, r3, r3}, &(0x7f0000000680)=""/268, 0x10c, &(0x7f0000000300)={&(0x7f0000000d00)={'rmd128-generic\x00'}}) [ 644.995196][T18287] ubi: mtd0 is already attached to ubi0 21:06:48 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000004f0020035db000000000000000000"], 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010f00000000000000000800000030000180060002000000000014000300000000000000e0000000ffffac1414aa06000400000000000600010002000000f53b76f9330a81e2287a7fc7b71377322ab2f2ed1a7bd512c6547ca9fb221f49b411dfffaf6cac38ed61aaa49b9d68a3dd8198de94c78d8a4e7af5778b1941411b47e27c8d2d52610472ba4a8475f30c7739399f1fe2c04e8e3d73cc3d170fd5f7fa76deecb859f8e78633d4bfb56be627fb63acab00d59441a50ed315f41bb8ed6d44cd6610f04b592b4f2792d7bb27dd4f"], 0x44}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r7, 0x8, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x800) r8 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000300)='/dev/md0\x00', 0x400203, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r9, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040841) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) [ 645.099411][T18291] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 645.130007][T18287] ubi: mtd0 is already attached to ubi0 21:06:49 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_RESERVED(r3, 0x5601, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r4, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0x0, 0x3f8, 0x0, 0x0) 21:06:49 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f40)=ANY=[@ANYBLOB="726177000000001d000000000000000000000000000000000000000000000000c1030000030000005005000068030000680300006803000000050000680300008004000080040000800400008004000080040000030000000000000000000000000000000000000000000000000000000000004c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000003680300000000000000000000000000000000000000000000000030026270660000000000000000000000000000000000000000000000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002800697076366865616465720000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000010000000000000000000000006e657462696f732d6e7300000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00018010000000000000000000000000000000000000000000000002800736f636b657400000000000000000000000000000000000000000000000300000000000000004800544545000000000000000000000000000000000000000000000000000001ac1414000000000000000000000000007866726d30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 21:06:49 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) listen(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) open(0x0, 0x0, 0x0) 21:06:49 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x1, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r4, 0x0, 0xe, &(0x7f0000000040)='memory.events\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x0, 0x1, r5, 0x0) close(r1) 21:06:49 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x81, 0x2}, 0x12026, 0x0, 0x0, 0x1, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff76, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000ffffffffea000004000000007072696fc753fcc5c01fcb890d0000000303000000000000003f4b34c801d6ca712f2b6b7e96bfebe43f57f09a71949cc36a4542fddfc24bdc3f3422c316c86247ac82b2eec271b0d1df5e1283e21cf4427c047ca5c8abd85105f7b7778f809664dc18fbe745d0cac1b0371c6a5aba723eb3e26b6127747a5dc7c5ce78648ee98486b84046ddfb9fb13f194e57b5d978bd13bbb9ea830c6e97d8dbccff3de7e735753e85899df491f0eff5e7726cfb8eaa72d02883cb648adf2e460bcab80412c64b120378e818510f3b8cfbb40c547ad7555a1f881b51"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x189002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$alg(r2, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f00000004c0)={0x4, 0x6, 0x4, 0x0, 0x1, {r7, r8/1000+30000}, {0x3, 0x1, 0xff, 0x81, 0x5, 0x5, "e0c856fe"}, 0x4, 0x2, @planes=&(0x7f0000000280)={0x4, 0x0, @fd=r2}, 0x7, 0x0, 0xffffffffffffffff}) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r9, &(0x7f0000000600)={&(0x7f00000002c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r10, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000080) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$alg(r4, &(0x7f0000000180), 0x0, 0x48800) recvfrom$l2tp6(r0, &(0x7f0000000300)=""/133, 0x85, 0x20, &(0x7f0000000100), 0x20) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 645.652359][T18319] ubi: mtd0 is already attached to ubi0 [ 645.661702][T18315] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 645.702441][T18318] xt_CT: No such helper "netbios-ns" 21:06:49 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r2, 0x5}, &(0x7f0000000240)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r4, 0x8001}) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r5}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r5) [ 645.747887][T18319] ubi: mtd0 is already attached to ubi0 21:06:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 21:06:49 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) listen(0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)) [ 646.094814][T18334] ubi: mtd0 is already attached to ubi0 [ 646.190017][T18338] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:06:50 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x3, 0x7ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000180)) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000001ac0)='./file0\x00', 0x42) rmdir(&(0x7f0000000000)='./file0\x00') r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x1a) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e23, 0x2, @ipv4={[], [], @broadcast}, 0x7}, {0xa, 0x4e22, 0x6, @local, 0x58b1}, 0x4aa9, [0x61c, 0x1, 0xff6, 0x7, 0x9, 0x7fff, 0x3ff, 0x8001]}, 0x5c) [ 646.232756][T18334] ubi: mtd0 is already attached to ubi0 21:06:50 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) listen(0xffffffffffffffff, 0x0) 21:06:50 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x8, 0x6095feb4c6236666) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x1070c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r5, &(0x7f0000001400)="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", 0x5c5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000800)='/dev/snapshot\x00', 0x400880, 0x0) sendfile(r5, r6, 0x0, 0x10000) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) writev(r7, &(0x7f0000000000)=[{0x0}], 0x1) 21:06:50 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x5, 0x20, 0x0, 0x0, 0xad3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0xa, 0x2, 0x4, 0x1, 0x37c7, {0x77359400}, {0x1, 0xc, 0x15, 0x9, 0xd3, 0x9, "e80bdaab"}, 0x20, 0x3, @offset=0x7ff, 0x7, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x8, 0x5, 0xfc, 0x5, 0x0, 0x17e7, 0x846, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdd, 0x2, @perf_bp={&(0x7f0000000180)}, 0x10000, 0x3, 0x0, 0x0, 0x7, 0x0, 0x75}, 0x0, 0xc, 0xffffffffffffffff, 0x3) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000080)={0xd, 0x2}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8001b00000000000000000000080009000d000000", 0x24) 21:06:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x6) r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x2, 0x400) name_to_handle_at(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x66, 0x8001, "8071cb11ee615e7aff9d869a2dc85841b4336cc9d3a483294d7db4adfd0eaa347377a221281e23632a0d302888971aee4596481dc305476a372e97a4d2a05147dd95180ac95c9ef9ca33c6d16adefdfedb14a34b59d9da5d09e52f426bfb"}, &(0x7f0000000580), 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0xd00) accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14, 0x80000) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x4008821) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000780)=@buf={0xbb, &(0x7f00000006c0)="24a626b39c48b408cf405ba9b95926369806d2341b24182ff30771d9f193dcb734ed3aae3765739881a658b74c6a4a8f83299c201fac598d5f2e2b0c9bd8d33b8c18b63645b8213d0164027adde73e7b0b6951aafe068d105bedd80c00948f956b4dc41709291de8193cdbc454176291bd88c36b77def790ed29930a0aaba07d90d04a5041a41b51bea90991431663ee3666f274630901201c87aee16d3993fab47488fb6f5a034c117e739a443634c193ac6b218cd38e567ad9ae"}) r6 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r10, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r10}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000880)={r10, @in6={{0xa, 0x4e24, 0x7, @rand_addr="1952a209cd308250a4dbb73fc9a91c85", 0x1}}, [0x2, 0x5, 0xffffffff, 0x7fffffff, 0x8, 0x0, 0xda4, 0xffffffff, 0x1, 0x4, 0x8, 0x1, 0x1f, 0x2, 0x10000]}, &(0x7f0000000980)=0x100) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000c3fd4d5b8cf5e2adc24bb2764a42e3000000092700128008000100736974001400028008000100", @ANYRES32=r11, @ANYBLOB="08000300e0000001"], 0x40}}, 0x0) lsetxattr(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=@known='system.advise\x00', &(0x7f0000000840)='/dev/vcsa#\x00', 0xb, 0x1) r12 = accept4$unix(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000640)=0x6e, 0x800) fchmod(r12, 0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000000c0), 0x4) [ 646.673504][T18360] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 646.714154][T18357] ubi: mtd0 is already attached to ubi0 [ 646.738346][T18361] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:06:50 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x21, @fixed}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) 21:06:50 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) [ 646.944695][ T27] audit: type=1804 audit(1583528810.816:2433): pid=18357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir072260335/syzkaller.uouc5S/290/file0/file0" dev="loop5" ino=117 res=1 21:06:50 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) close(0xffffffffffffffff) getpid() r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000380)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) sendfile(r1, r3, 0x0, 0xa808) 21:06:50 executing program 0: r0 = socket$kcm(0xa, 0x922000000003, 0x11) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0xfcf0, &(0x7f0000000100)=[{&(0x7f0000000200)="f4001100002b2c25fe8000000000000005baa68754a3000000000200000000000000000000ffffff8400000007000000c00195c1e231c10000000000067bbaeb4e914b976c5b7e34", 0x534}], 0x1}, 0x20040800) [ 646.990989][T18357] fuse: Bad value for 'fd' 21:06:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840)='batadv\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000026c0)={@loopback, 0x0}, &(0x7f0000002700)=0x14) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002800)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x4c, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9fb}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24080800}, 0x40010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) syz_open_dev$admmidi(0x0, 0x7, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) open(0x0, 0x0, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_SIOCADDDLCI(r7, 0x8980, &(0x7f0000000000)={'vcan0\x00', 0x8d}) ftruncate(r5, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r3, r5, 0x0, 0x80001d00c0d0) [ 647.034205][T18357] ubi: mtd0 is already attached to ubi0 [ 647.080132][T18357] fuse: Bad value for 'fd' [ 647.186447][ T27] audit: type=1800 audit(1583528810.816:2434): pid=18357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=117 res=0 21:06:51 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x2, 0xd, 0x4, 0x4, 0x7, {}, {0x2, 0x1, 0x3, 0x8, 0x20, 0x8, "dbe794bb"}, 0x9, 0x3, @offset=0x6f, 0x7fffffff, 0x0, 0xffffffffffffffff}) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x400) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x20000, 0x0) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000280)={0x4, 0x2, 0x3, 0x3, 0x0, 0x1}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x210080, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000340)=0xfffffffa, 0x4) recvfrom$l2tp6(r1, &(0x7f00000003c0)=""/4096, 0x1000, 0x20, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x20) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r5, 0x8001}) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r6}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r6) [ 647.236366][T18376] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:06:51 executing program 0: getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x200842, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x41a) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) [ 647.839636][T18401] ubi: mtd0 is already attached to ubi0 21:06:51 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) 21:06:51 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x400, 0x4}, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', {0x7, 0x0, @loopback}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000000)=0x68) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U+', 0x1ff}, 0x16, 0x3) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000019130000656a0000002bdca097fef4ca6fae858276"], 0x16) 21:06:51 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0xfdc}}, 0xe8) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) semop(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, 0x0) getpid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x4000, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000180)=[{{}, 0x15, 0x80, 0xbf89}, {{0x77359400}, 0x4, 0x6, 0x9}, {{0x0, 0x2710}, 0x5, 0x7, 0x9}, {{0x77359400}, 0x2, 0x800, 0x6}, {{0x0, 0x7530}, 0x2, 0x200, 0x9}, {{r2, r3/1000+30000}, 0x4, 0x2, 0xae}, {{}, 0x1f, 0x1, 0x7ff}, {{r4, r5/1000+10000}, 0x4, 0x829, 0xe45c}, {{0x0, 0x2710}, 0x5, 0xf0b, 0x5}, {{0x0, 0x2710}, 0x0, 0x1}], 0xf0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 21:06:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt(r3, 0x1c13, 0x9, &(0x7f0000000140)="df381b22d0d50fe681bfd074bf3b54c2eb64bf8ad123dd6612f7c52489e6d3b6d81922c816d52a5b692d8019988abb8f988cd5b495bff864133028532739fdd9e0ae23af", 0x44) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) [ 648.048531][T18401] ubi: mtd0 is already attached to ubi0 21:06:52 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x80000000) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x1) close(r4) splice(r3, 0x0, r4, 0x0, 0x100000002, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, [], 0xb}, 0x7}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xce, 0x681, 0xe71, 0xe0}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000014) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x300, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x0) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r10) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r12 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r13) r14 = getpid() r15 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000003b00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x3674, 0x3, 0x0, 0x6, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x8}, [@generic="4a5d6d13794d70760004bc89", @typed={0x8, 0x6a, 0x0, 0x0, @uid=r9}, @nested={0x1257, 0x13, 0x0, 0x1, [@typed={0x8, 0x72, 0x0, 0x0, @uid=r11}, @generic="7e7c38a24d00896821806988cef292ee5e47f0289520fc256fa762f2231d202337f039e4c806ff0239650783a2b7dc9e1ad1ab2f77b9ebd532bef1d4fd640fbb6a34635566851cea0082283bbf84c499690cd76f1be9bc4215ca608257046d00a7ff89331ab5e0ac49eabf0c173d64e4ae0d2f867f", @generic="bd865e6b5bcee3b65a44809ff8f628a7f174e91d7dfe80a7ba63931313b7bc60c2e01a4aa0170154314d43e75fd5fbac954b6710530650a0b1167c25ce763f126c309a4a", @generic="4b2aeae15860e3f74b5a402a0178c9d54f928a59e60bdaa5c078be876a9144716706897b156e18ef35078caebd2995164356d6b2090a643b751723fda5644a3e47b0dd5cbc5eb37bc87d1e17a598faf6f2ef25d6e1f4ed47521f26458b83a2bb9764619d88be0440bd2cdc13a8a49257747fdbd0bc52ea", @generic="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", @generic="c510df5165c2a466b90b21b3738761b1c521bb702564dbb87bcd171828070f7b081577e4", @generic="6671b2ec38e9bb349c55c52614445ab44202fafcab13bf9a7e172575cb774417ec8db5e6a1df93317a78167f6c72c19b69a59d407b04802ae379738ed7ff676b7a205bb8fb09442f23966942c8062fcb90ab466cffc1a4aa1ead155e309f375bc036cb4f497f9221cc9e897f86b66ca67b0e4fdb4697e21c54db6237e73ee68edc705df2a0b9aad21d67635b18fe10996439657ee201abecc4bf28450f15ad00c0e175a6f90fe987804d10b74bcb1607324d5ab8635c72670356882f54adf238f3d4281da4443a5666220535ef4384a03cf76aa3d366aaafdfc01c16d3fb894f29e85e85dd7b89b98f8ef46aeaf3b3", @typed={0x8, 0x6a, 0x0, 0x0, @uid=r13}]}, @generic="5f6b9dd76662b8dd857d444033e2b7c44e42ff38a0380e00e9aeb0852f8e9d8c3675b4af94eac446335bef0b42dc185f6e5cf8b822701ff78417", @generic="878c048cffefcf4eea0e2d1e22aa89a5887b70a3da5168acd82789072e1c0b12d56c9e94304ff9253a1d9b2f46417a363916d36c4844f70d30594f42093890fc98beeca8daa911f24a448df7a1efb47d336a73a46c99380ba0", @nested={0x225a, 0x78, 0x0, 0x1, [@generic="80378c424b1fa5ed88fb1e501e2e429a26845ea9eadbb78579fa4ac00d4d16606f088f4abd5cd8197378de118c786a60b9b757805f887790f265877c43f989ad44b5543dd070f80d095985809570d201", @generic="3882d950f5117960430cc0100c8b58b60a5e", @generic="b0435ff7200f0751c7e04bdec5411af2042014f453e1a0d4cb5986c6f231e0d6198b2bfc425f48ae7705f8021256fba17f84ca7ba008b4b224cdaabdbe2a1651c45ced2119787f7ea9b6f27e94b2f43f175be2bd526fb39a9620f59651416a307ae09f4e8c333da19abe61e2bbc8d4e4b0c6c595ae2722dd121369873f4b9d105f67d9fbf468bba0a52324800168c015b13964a52ace623ef8656f7cf0f48fc9c4d868", @generic="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", @typed={0x8, 0x39, 0x0, 0x0, @ipv4=@local}, @generic="063216b0608e639a70db36278f44d63f6ec0dc5194188251703aec323218bccf3be5225bbc10ba5f97ec608a90e26d1a9be3019f459f8372e8c935f1e6ad750f67acbb9a487f27267a97922b688bf4ac635f3069b11136f68ee6194286407c86a3c2fbd18e38df870625cc5db6d9b320350d40fa2f8b6c8329d20091fa5cc1a58dc1548a20c456c886481eaa585c8a0878935035230132abcc24632697bf04a0057eb0295efb0d1bf86457d135e233f55be9c436fadc5bbda2a306fb1caac6c3423e0819c95645fb64161828253b90595953709e52dd9e8c125fc6aa4e8b38cb32073ae96b077a3214dd609688b9d1088f8d7d8d2e5a48666a9334c7008148e9f0faa796bc809f698fa9814b8cfef616162c20acda514039e4de21a2cb2fcd9363c948f5d0748e9fc496b0fcb770696d62a01230aa66eacd90f91593fe945fcb70bf78c6f799a8b18cd53d9c08af27a9af422d58cb654911546a8efe0d796556aaec743cb2006ded9cfc00a044b2c0c304c513ed5727f700c84941050acc5c9d17fc98f18adaee838662b31f050a6e36bb36926b2753648523feaf3b96bbcceadfec964dbe399513d92785015550f1d3cf65d9350ea9c2f305f00289604bd8c03784ccf8accbb1ecc52bc6a5ad24801ba748e48e73c82b862451b8763659f0a522c4fc21246cf52982cec30efed2e3229c9c73ca34c6ff8bd605a48e1cb36a35cbfd95bd80ef52a7b857a442e53781bdab2c6449f9dd900b858b8fe433b09737373b8a1d1041f0875414614c4ace91b050cf6c709dc28d1ff8bf591a85452472c9762a26264fd97a0e883a2b4090c680b54808649af6648740d98de0912b692ddcc6f28ee72fffbaec8b911d43e3b9d417873d08543452dd27882e32b80081fca82720cffe12868eed29d4d2e878e6f880199cdd910d4cd74dbb5399cd7b1ad5e376d1dbeb4f7ade1cb62917c68b67304a0f56475ff43023faf3690c42d2d79596ca36686dee30c919d14eb863136c0ece787efc83184edbbfc5bcc0016eca0dddfbd30552ca91b1ce43fc10d3c062683872f920235717c24ee6f45bcd0273e9a14cc6d2c541e1f7ef2dd6da7050a8c61f8f338f99dbacf54abf52c0ecacfbc3fcb4462da03fd8f4219db3b51fc30af08aa7daddfbaecd03e71bbeafd88299c3b78ab8d87817f5a2fc5955e2d4574eb300460359806eb6430e42503aac8879b67b5cdec4e43a60f430c12419df8842805afc72cddf2868e4990e2d5c4d10761d9e5f7d0e7de3d41774d885e6a3226ee49cbb57cb36e8df168803bdd267474357b7f9df947639bfd9ac8b575c48f424c91710cf9d403460ce48abb537912be2121dbe4b0848cce1cd1ffa94aebf0395dc5aa9b88d8f64eff9125bd75885bfb0830b676909d6729cd43d72e5c2cb6fa585447067fb58b74fb4b07e7e92cba0ab4154cfc0b759b86bf1ead4e749abbfd6424f7b81d47b8835e6e8f1b736254911e04aec87e05a4bc87121116400e56dc7a20ce042baf6cbc5fd46d914ea0e0f692cb487c9ff4af0d850d1aa29bc82bca536602a54ec9e78a3cca7a1e772953e8d19b195038448d3156e9ab28535722e4525e3dfa6d7a17545e57fc0a558c976bf79bbe51a820ed0afbcf8fa5b772adec0c7ec0bd01ad00b02cdd6cdf20a2bc795375ac7e27d1a0f63ee9fc22efd622dc8f8a0bf5d7a8adbc1ffb2396be988b122018f0a9fb7cc40ef4c5adac9f81b4b00f99a5bc7a03d9aaa08564e2c4daf40ff3e037b79b69f15f3dc23e62dbfd16cb7319ca744fb162349e98f910bb33ee54589fc154b524ad2956c6bda96451d33d0f551aa161fab8adc65e554e02a1c82546c0d85e3efc2ac524eb836aa1a499257df58c9e80bf8a9268737ded1666eaf7aa59edfe69584887d944042eae8ab7178a29faea7ed5662b32636c505f7bff6a6468326fc1a2d806f92f97d7b57c23d05aca8e5259d5ff4c9602eed7372e26ef241d92a0d46177a6967833375c41bd4664a2196c31530dcd396d8b6aa33fac4a27852a4e34832c6adff262cb0c7627a7b957e5d2062ecd0537131effddb85dce443557e8342b4eacff2c1d7534a71ca327cfe01d87edf3424895a8736170991689e591769458311b11ee1db34d06f1d249cf95b46b09f7f2c7be0e0b9940714c46e2a7c3bbb34d6fdf674e7ee54a863af5d9accb38b87aaa1de1820112771ff46eeb49db35feb8d57fb5f79029f2db15faf15c6137254b1a565a98f8f2fdafa166346c2d2bf7e947d63f91da19cd51435bf1505da3e4cd43c2d12bfd5b58856b3cd715f6501a5c1549dfb1e0fb1b69539f5c104fb78a363665884b1b3a1a0d31d4f9830c580e82766ea7193ed58dfa911fe221ce40412dc77b040981d84d485001ad2eb950d06082da54102732def9ffa02a2a79082c0d59254a10e9e4505ef932c2b82e16935013fee24b7256f0acb01c722fb5625b7fad04fb2662f1dc03044ed621883e64f8ff11c83b6ff60f5ca5954a92a323a5086df88ecd4e6609705557f64dbd961bf026ecc3d0fdd1cc2cf0c642e88f6c597f6d6af2fe0d07606ca643f6839847fcb76f7fcb8e2192c7271f9e0497b3df0f99696ad498cc7b1e02cf0622a8f7cb388478ec84cd74f619c912bb20a8bbde9e2c77e0df505d0df821b9d32d560572511e241a807a904f3e9594c0478887e118b81273af1db482b340b02467ba5f4be24f5b11f8f2eccfc33f8b27619813bbe290eaf9ec943f95c075a4eafde08b2698c8f71b8f22a80c9f54d279fc87ad8eb70b92f636b47fa322395e67d289fc1be0230688cd11d6560830a9b3c11501f415dff626edb972907defc0ddaf230416d9f20615382272b4bf1277b6584252eb4c32325cad22ee9f9259842acf98d736400fd8606b49c9b48da139bd3dd843ec53213749fbc3bea63f9a61261e3b2caaab067e89787822a41413847624140b863b4efff5283eef922bedb1053f8b2c0c102abb577897e5c37cf05c8eabd713f1c33b5c36ea9066c57756000562f4546f2c0e0bdf3f4e3597942327838fe88ebded0b3c059c918d075f32f4700a22be76a9fe37d87b3f47b76dd93ba170d8e18486fca5a5baf1f5ea6f7495bf938ec40ba53a772a8bc6ae0cf703d1964b4b947fe3dc9bc8377c7e00820a91a99ff2e7b7dadc4572a827af8b0c85c8ba882241765216989ec3d84be0634a15a346dd7d00769c4ead302c8ef09b1effb30f6d735544a17d1a2eca0ac00d0f1424d51193335bcf0c867cc455cd999209ae4538a0f343a9252271452e2a1386e3fc655beed74c772019857e1aaf42ffa6d355d3ad781a580b69afeb69feb728526a97ac52708f2a50b8308834fefec1830b97d2aec1147e133a14b6fdef43c24842cc596d2ff1ea182017d86222e2682c52edf250bdee89690edd3c55a5f43a771e1718207b755c7af793ce24543e6ec0f907bdf1be1013591c7137aa65ba2cdf6e5a78a42a08ffe93a733ff80fa3723fc6684f5d52381d1b467ae8d4a63ea0e6fefc40cde58e17f72c42d7cbaca626cad92227d4007ffd5fe4905cba62dbccaa3064d77e23c5bd388181a0a81f2ffe61774b5a895fa161863b317fb24f764009fd938a940c1e3bbcfc3cc6c69a24df8910ac72905a3eeec5434aec678806f7f9ec38415481265a21e23447ab365acd4aa511774004b7329e0dc2f80e989f03cd560669fa877a206d438c22a019112edebaacfa979ea2b186fdeb2f27d75872ec42947f08fec0ecde8e83ee7b8b907d7f761b1045c051293413e3c68ea1cd439e4a8e1a9cfbb45d02e1770fe079b978b09b22129e6bba7541a33683504031ef63f08433ca01d8db6ad1a4570b275606bb7b356e6a67556536d3cad9f56f55b387a2babcbe895033fc5a94b07068d9563466d77b0eaae0ba2d93bddfdf1adf9a96d4fbd09e8e0eb7c5cb23d814184c176e2b09565bf5207b52f383879b0793c5be05060f662e8a188c11f1ef7ca95347e64539280a77e8ba03f478bad758a4b6791903943a7b3684616d6aea77741dcfa2721e79c7a6a7cee8f5ba80381e70706081828e77c690f5dfce2a51f8a9a78eb6ccb379bf3f28e73a8c0d96f2ad282543b3cc302de36daf47f3c240ecb1695211317b35624c97f60f5fc3a2088f027479e4c209f782377132b9820e75c1916426f41e2b92b753cfb6b2dcd10ea7921bd3584784831d861b3d822b6b824f01b4eb0bd322f4de7ffc158f9892364ee99e5987d4a29e5c517d854ebc3d0cd7d7720675951b7a9d02c932d986ea56749340744b7f07f673f76bb1b151d2241d89a093ae82fd9ebe9157c446f2de3dce452b75b893bd7064f509a5c6237b874e89c39c165453519e4ba55f06fac695ab5a3a36d285f71d889fefd646cc34677d7f6f9fab40e7a4ba788668f1ca255d5330c80017598c9d8d53d0507aa662af680ce1f7abec0bde29281731113dec916ee9b18c5a574785dd6ad5e37752d431178ca145f0265c9a5cd222f282e029d8e3b9634e4972cfc69896c9d843a77ee8634c4d298b5c120eaec4c58f05b1909704d55eba2d5e08a30ce7b10342e57cfa1fc670c67042df1335df1d1918b14342dab1fdf78f7adc21c5cb5e7a996e041dc6cc691464a82a72ef75858169053adeca2b65cc948022072efa15baa9d977641ffd53eba65e1d63b0e9490ee834a222660ceda117d25d0f679a0c39789e0df593d4f0a6bb270e14d5ca2bdd70a028daecf2016656d302ecb1d247fff3b77b2f6ef18e911e4d94a20e42bd738416ab4f471816349b8bdf65a3624e419cd9de3da96aaef3196da571be08b6d3d3f2316a332dcae6fdbb423a6831a42922f0ba95f4b6cff6c58251cf7e876eda5c322a3cd5ce05ca499460d7c0d133806d7d67adf6b36bd55cc33a766e578fbf92d3df8d58d3bcdeac19c3d89fa4a493a957aa3a4e939c2b7da70d37dbf4224d10d9d82a22451a2482b060c270e52710db699e04ac3cd32f72b4ed28c9bbdaae4e4b6683204b364dd67e9fbcaa50b84f13677b0c702e4259dac012e96afea0d8878ad81ef62bd0ac232ae13af9cc16db3a53c6f1342af7f9744ad73b7f63bf8bc20ad45cef222e887b6db55a66435f6a89adacf0a26f0876fb624dafef8b051176de1defc2bf75da10264408a969f47ec5663ab8c8e7abb4c7891a9e070b3685446b079c82c4e05796c6de1a66b7ae8cf74f897fe406c9e13b511ce0860d80bb23e99655e02eed928ccc9fea6f5e6db5969099a7bc456da10b21391b40474a355a82dabadebec3732ed950c7da4ea7fa55f573479a4adb68bab7e7fcf0b6d5b5d195f91913f01ff672c52ceaa2b1d7999ff51affa6c38b1a5aef4acd94a3d7b9f1053281ce0f7b2c92327b85cf83941e45bd33d9df6d74c199f87d4e716fdfcdf0a40e7fe1ded87fb7d3732fc11c01f3be0484f7e566e250ef023e271a16e53f8c7d9691b322127764506cacf6ddde58e9c628ab1948369320a5d094dffbd4b87fc48c672c182b9d072d797c9a0535befaee322ded169b1c283d99f4f1e278ecb3678890c5b698c397248882380334af134260ab61736b9b7e94eba3e492952f2d101a6671f56d10b44e3ddeb2ddfd74729f18f5577ec00be0116eae3d1cc1e1cc31efd0bfc289f93cea96ec8d8e98d70f28c074258da1ecd0d44b0ec081128bfc975fb6755531c9140cf2502ea4e008b68c3bedcfe3e6d578d494ab62118c33cbca21e0bdbc9dc4bebbb71baed824352758a3294529e4c7efdcb8e9dd4f4326e2254a9cad8c4c10db6", @generic="3160389159aee4d138dfa5616c51b4f23e36912dd962ea73cff9b75015fc4bf0c3127b0992a8232ce8641952c51892668c18c2ca4505948e65f861d01b0527ae5983af82feac10c856e71f66d2a06d46b4addcd49c30d3849bdc2ce37196893c108bda3307a68bccbbdb01d0e6e5007f5e79ef6b9e79f4fdd9ffbe6f923ef41f733fd2edcca10ccc57a7c687301fe2d59b7ff7452808edbb4cd48e032242a0818319b875806faa8c86b87518247889de7b403ed4216c5433905d538a3beeeb1c67f1e19cb760743bd3f366d2a20ed8", @typed={0x8, 0x4a, 0x0, 0x0, @pid=r14}, @generic="2c46571de361b5da8e5e7d70752e90d7ec7f21381e818ad139130a483288549a91c656cd4d788e506d8b35ac1d3d8dbd51f1ea4023d23746d1b43afbe00fb7cf907e885d57ab819e6545c1d6952e3eb18c5dbac504249a2e3d7a7d758b9fcefc1e9d82a28b65b1120058f0ec3eab5562bac2"]}, @nested={0xc, 0x6, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @pid=r15}]}, @generic="3e2af825f449e3b8b8fce6a3370562350a8e22098cc17d007b437e663f3bf01c66473bfaf21b1f9a9759835b612577a32f713dbc92e1bc1e1408e8d8b17f73c1c61b958aa565075c7641e087852bb299e3132fca7a408e59da13ba021f69e76d5a798e9c8f15908e3faa36f4c5c40cdbc04897f700e5f9c020e324f035c6b1894e77f97478178019ad6ee695101fd9eff0c1726227c9c8cd0730a325", @generic="e07a117d7d75ccc38cad081967d37c73e481258378d523ba9da0c0c9ea1a0c319d74790b5d24241ec538c98c081ac6e606ac65149d99b7933237d8e3f2b0dde4ead874af95001a227d6ddce3b694c572cd086147d4fc16c33025"]}, 0x3674}, 0x1, 0x0, 0x0, 0x800}, 0x4414) socket$inet_udplite(0x2, 0x2, 0x88) r16 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r16) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) [ 648.111135][T18410] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 648.125260][T18407] FAT-fs (loop0): bogus number of reserved sectors [ 648.184920][T18407] FAT-fs (loop0): Can't find a valid FAT filesystem 21:06:52 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) [ 648.334059][T18418] FAT-fs (loop0): bogus number of reserved sectors [ 648.357134][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 648.377470][T18418] FAT-fs (loop0): Can't find a valid FAT filesystem 21:06:52 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x100, 0x5, {0x0, 0x7530}, {0x5, 0x1, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_INFO_BUFS(r6, 0xc0106418, &(0x7f0000000180)={0x2, 0x5, 0x40, 0x2, 0x10, 0x9}) r7 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x3, r9}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) dup2(r16, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r17) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r19 = dup(r18) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r21) sendmsg$nl_route(r11, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="6437a475cd000000580000022abd700300"/33, @ANYRES32=r3, @ANYRESHEX=r21, @ANYRES32=r12, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000300", @ANYBLOB="a5a822bbea3d4168215bbc3ccfde56e37518927973732df8c040e517216459b40c05654bff5bf6fc623349f8c3fffc4906436bae7823daad2f4d1e1174b112c9ac17bb34d187af57d2ab6378a9c16ccd20a79d369aa427f7e0d24f3a8d8f02be7619bcdf6cca17b8141be3663c8485", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYRESHEX=r19, @ANYRES16=r20]], 0xf}}, 0x20000010) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r22}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r22) 21:06:52 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3c00000010002fff0000006332e7f5e6200000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000400120012000c00010062726964676500000c0002000800250000000000"], 0x3c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000000)={@fixed={[], 0x10}, 0x80000001}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) recvmsg$kcm(r6, &(0x7f0000001680)={&(0x7f0000000180)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f0000000200)=""/5, 0x5}, {&(0x7f0000000280)=""/177, 0xb1}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000500)=""/86, 0x56}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x8}, 0x2126) write$apparmor_current(r4, &(0x7f00000000c0)=@hat={'permhat ', 0x2, 0x5e, ['trusted\x00', '}.,vmnet0proc\x00', '&vmnet0user\x00', 'nodev+\x00', '\x00', 'vboxnet0\xb1]vboxnet1nodev\x00', ')\x00']}, 0x5f) 21:06:52 executing program 1: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x287}}], 0x4000000000000b2, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001780)='/dev/ocfs2_control\x00', 0x10000, 0x0) recvmsg$can_j1939(r0, &(0x7f0000002f00)={&(0x7f00000017c0)=@isdn, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001840)=""/147, 0x93}, {&(0x7f0000001900)=""/61, 0x3d}, {&(0x7f0000001940)=""/43, 0x2b}, {&(0x7f0000001980)=""/134, 0x86}, {&(0x7f0000001a40)=""/180, 0xb4}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/181, 0xb5}, {&(0x7f0000002bc0)=""/207, 0xcf}, {&(0x7f0000002cc0)=""/162, 0xa2}], 0x9, &(0x7f0000002e40)=""/136, 0x88}, 0x10020) socket(0x10, 0x0, 0x0) setuid(0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) fstat(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000240)) getgroups(0x0, &(0x7f0000000b80)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f0000000300)=""/4096, 0x1000}) preadv(r2, &(0x7f00000017c0), 0x333, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000000)=0x4f4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x2d) [ 648.832125][T18440] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 648.832374][T18434] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:06:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 21:06:53 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) 21:06:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x248000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) time(&(0x7f0000000100)) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r1}, 0x1ff, 0x6, 0x6}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000001240)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001280)=0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f00000012c0)={0x9, 0x1, 0x3f, @local, 'gre0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_GET_XSAVE(r8, 0x9000aea4, &(0x7f0000000240)) semget(0x1, 0x4, 0x8) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0xffffff1f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_ax25_SIOCDELRT(r10, 0x890c, &(0x7f0000001300)={@null, @bcast, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) 21:06:53 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000140)={0x100000001, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f0000000200)={r2}) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000100)) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x0, 0x84) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, 0x0) umount2(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000240)={0x9, 0x2, 0x6}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000001c0)) [ 649.413251][T18433] ubi: mtd0 is already attached to ubi0 [ 649.431279][T18463] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 649.493551][T18442] ubi: mtd0 is already attached to ubi0 21:06:53 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) [ 649.560455][T18440] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 21:06:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r7 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xba6, 0x40001) sendto$rxrpc(r0, &(0x7f0000000080)="3ee24dbdb23a1c9bb71d77e6d376752999fc2dfc496540b4a74fe26a95730ea4cef1afb1a99af7cabc95ddff87", 0x2d, 0x8040, &(0x7f0000000100)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0x40045731, &(0x7f0000000040)) 21:06:53 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x402100, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)={0x1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r3, 0x8001}) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r4}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r4) 21:06:53 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x1], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0xcccccccc}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETFILTEREBPF(r1, 0x6609, 0x0) 21:06:53 executing program 2: syz_mount_image$xfs(&(0x7f00000007c0)='xfs\x00', &(0x7f0000000800)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@noikeep='noikeep'}]}) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x41a000, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x8, 0x12) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 650.010191][T18493] ubi: mtd0 is already attached to ubi0 21:06:53 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000440)=@chain={'key_or_keyring:', r2, ':chain\x00'}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='id_resolver\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r1, ':chain\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000000)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020098000100049d23000000040004200000000008000100c059dc22e3e1b021e70e82d727d2a4a0508c70eac74bd6cc4ca994952a435d44d1d7a09da552f35a706a8445481dd3542e3a3b90be9f9f45e6ee0300a623544104e0189fa4506c1660231023ec74392adb8a084ef921cc071991b49bf176190e8c1400100400aefb2df4d32ad98a210dddd3b813aa3022695727f8bfe5895c8a2ab5a2317e0747af06b0778924ba54307c4d08505da74f31ea8454fc1bfc7a68a0feb4bcadfe", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="08000400", @ANYBLOB="1008000000b8"], 0x5, 0x0) keyctl$chown(0x4, r1, r5, r6) clone(0x802102002ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) ptrace$setopts(0x4206, r7, 0x0, 0x0) tkill(r7, 0x11) ptrace$cont(0x18, r7, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000780)=""/109, 0x6d}], 0x4, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x146}) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r7, 0x0, 0x0) 21:06:54 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x401, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000140)=[@mss={0x2, 0x20}], 0x1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x400000, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xfe28, 0x400}], 0x4801, 0x0) [ 650.121164][T18493] ubi: mtd0 is already attached to ubi0 [ 650.138254][T18482] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:06:54 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000073, 0x28001) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x17, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x18, r4, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4410}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54500500", @ANYRES16=r4, @ANYBLOB="200027bd7000fedbdf2502000000400001801400020076657468305f746f5f6873720000000008000300020000000800030001000000080003000000000008000300010000000800030002000000"], 0x54}, 0x1, 0x0, 0x0, 0x20004004}, 0x24) [ 650.330529][T18503] XFS (loop2): Invalid superblock magic number 21:06:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=""/190, 0xbe) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, 0x0, 0x0) close(r0) [ 650.387233][T18521] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub 21:06:54 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x20, 0x448c00) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:06:54 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) [ 650.440018][T18512] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities 21:06:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc0505350, &(0x7f0000000140)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000480)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000500)={0x8, 0x120, 0xfa00, {0x1, {0x7ff, 0x7, "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", 0x4, 0xea, 0x1c, 0x9, 0x80, 0x1, 0x4}, r5}}, 0x128) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz1\x00', {0x7}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfc81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xa2c0, 0x0, 0x0, 0x96c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x4, 0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87b, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffdfeff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10000, 0x0, 0x7c], [0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x725, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0xffffffff, 0x4, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x34000000, 0x0, 0xa7b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x498b516a, 0x0, 0xa1, 0x3, 0x7], [0x9890, 0x1000, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1, 0x200, 0x0, 0x33, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) close(r0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4c003, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000040)={"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"}) 21:06:54 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) 21:06:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002a00)=""/138, 0x8a}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004780)=""/163, 0xa3}}], 0x0, 0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000100), 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000200)=0x11023c, 0x4) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000001c0)={r7}) close(r2) preadv(r1, &(0x7f00000017c0), 0x1c7, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000280)={{0x33, @local, 0x4e21, 0x1, 'lblc\x00', 0x20, 0x3, 0x2d}, {@rand_addr=0x1, 0x4e23, 0x4, 0x2, 0x6, 0x7f}}, 0x44) [ 650.771961][T18534] ubi: mtd0 is already attached to ubi0 [ 650.888271][T18534] ubi: mtd0 is already attached to ubi0 [ 650.981263][T18539] input: syz1 as /devices/virtual/input/input9 21:06:55 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) 21:06:55 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x64) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="6bf2a966edcf4c62d1681beae8ad5906afddadbe2f2268076d1f557517bf095c2977f5c0ac7655f343b1ba2eed11cd7304c6bb884d62f40253648859f7bffdb3c2a44d4a4e5a3804d8eaaf883a8181f22c379810"], 0x0) pipe(&(0x7f0000000080)) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, 0x0) accept$ax25(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40040, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmmsg(r1, &(0x7f00000002c0), 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 21:06:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x6d0d6182ce2eacaa, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x60}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000aa8000)={&(0x7f00009b9000)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) umount2(0x0, 0x0) socket$key(0xf, 0x3, 0x2) [ 651.439197][T18567] overlayfs: failed to resolve './file1': -2 [ 651.562168][T18572] overlayfs: failed to resolve './file1': -2 21:06:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x1, @none, 0x4, 0x1}, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x0, 0x0, 0x101, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x20) accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80000) r3 = socket(0x11, 0x3, 0x0) ioctl$SIOCSIFMTU(r3, 0x8914, &(0x7f0000000000)={'hsr0\x00'}) r4 = socket(0x11, 0x3, 0x0) ioctl$SIOCSIFMTU(r4, 0x8914, &(0x7f0000000000)={'hsr0\x00', 0x5dd}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24) 21:06:57 executing program 2: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x82, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa0003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x6}, r0, 0x0, 0xffffffffffffffff, 0xa) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0xc00c) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r4, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="00026639133ac6e329fec6aed6ae6ec95026bd7000fddb6882c7"], 0x14}, 0x1, 0x0, 0x0, 0x40040006}, 0x8000) r6 = dup(r2) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x88002, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x1, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000028c77000ffdbdf25090000000800090005ac0f170800090005ac0f00050008000200000008000a00501901500400280011000700291f3858b2612177a86f494c6600000008003700010000006192559a925e24f5232203ac82cc6af18a489ff8"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000480)={0x3f, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}}}, 0x88) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="aeca6700", @ANYRES16=r9, @ANYBLOB="00042cbd7000fddbdf251900000006006d00001000000c00990001800000040000000f00020032147d68bfdca573e9d88900050060000800000006006d0008000000"], 0x48}, 0x1, 0x0, 0x0, 0x4c054}, 0x24000000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/50, 0x32}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r11, 0xc040564a, &(0x7f0000000540)={0x4830, 0x0, 0x3006, 0x7, 0xb4, 0x8, 0x8, 0x1}) creat(&(0x7f0000000240)='./bus\x00', 0x0) 21:06:57 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = syz_open_pts(r1, 0x1) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) dup3(r4, r1, 0x0) 21:06:57 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x4000) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000180)={0x0, 0x0, {0x56, 0x2, 0xc6, {0x8586, 0x4}, {0x949c, 0x7}, @const={0x3, {0x4, 0x7e36, 0x3, 0x21}}}, {0x53, 0x8, 0x40, {0xe9b, 0x3}, {0x20, 0x1}, @const={0x401, {0x8, 0x8, 0x1, 0x616}}}}) prctl$PR_SET_MM(0x23, 0x3, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r3, 0x8001}) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x220140, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0)='gtp\x00') r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000005940)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0x4004510d, 0x0) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYRES16=r5, @ANYBLOB=' \x00', @ANYRES32, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="06000600010000000800090001000000"], 0x6}, 0x1, 0x0, 0x0, 0x49085}, 0x20040011) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x2200, 0x0) r10 = socket(0x11, 0x800000003, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r14, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3a4e4ebb5ef67000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c300000000000000"], 0x74}}, 0x0) bind(r10, &(0x7f0000000080)=@ll={0x11, 0x0, r14, 0x1, 0x0, 0x6, @dev}, 0x80) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x68, r5, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_LINK={0x8, 0x1, r14}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r15}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r15) 21:06:57 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:06:57 executing program 1: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@multicast1, 0x4, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb6e, 0x0, 0x9}, {0x0, 0x20000000000000, 0x10000000000000}, 0x0, 0x100000}, {{@in=@local}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0xfd, 0xfffffffd, 0x0, 0xfffe}}, 0xe8) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newlink={0x20, 0x4a, 0x705}, 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r10, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) bind(r6, &(0x7f0000000080)=@ll={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x80) bind$can_raw(r5, &(0x7f0000000100)={0x1d, r10}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$alg(r2, 0x0, 0x0) r11 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x3, 0x0) 21:06:57 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 653.372524][T18588] ubi: mtd0 is already attached to ubi0 [ 653.560513][T18593] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 21:06:57 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 653.845156][T18600] device hsr0 entered promiscuous mode 21:06:57 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) [ 653.904750][T18600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 21:06:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x128, 0x128, 0x0, 0x0, 0x0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ipv6={@dev, @dev, [], [], 'netpci0\x00', 'ip6gre0\x00'}, 0x0, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000000)={0x401, {{0xa, 0x4e22, 0x0, @loopback, 0x1}}}, 0x88) [ 654.217597][T18630] xt_NFQUEUE: number of total queues is 0 21:06:58 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) 21:06:58 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) [ 654.468411][T18603] device hsr0 left promiscuous mode [ 654.484264][T18630] xt_NFQUEUE: number of total queues is 0 [ 654.841449][T18596] device hsr0 entered promiscuous mode [ 654.861873][T18596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 21:06:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x1d, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b40597a0563040000000000ebe06815b4dc3bf41b74db694fd408250fc83e5a75c549e443c99bf5582e9cf69dd2b60083cd246e9f3ff17a5aab644cc9f1a20b78693e7742ebf109fd353a5f1bb8027a273c9ffa2dbfd7efa3aeedb467e437d882a94581513e7fc97a6e11eb0936d839f9dd50c70a3d9a3284ad1f3f6bae690a9733800ea39ae7366925d96e31c8042d7bcfdf0e873480cddfc6d67e802479d9937fcd5c014fb6949c5b678d345936a8e94e5870dacf6c31c40fca4b8ca8f88339fef9af14b605160a2915462189ca5fe2fba73351014d31219d27e5b5d0db705ab0bdb14fa8a6708513a30d90545d20c97ace6e505cd1408e08f3b0ca2ce707a7dbaddd426bba565ce3118a762866bec2de47f8f7a5d43d635e3e5f8c838d45296c02bfd25e36497f77a12bd2ae1b5955bdf29d9d5b60b4cdd054f2d483e76c2e0c50db240b64f557ebefe90d8c4bc2e96b1e78993749cd7f43a317e6e90c"], 0x0, 0x717000, 0x0}) 21:06:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x400000000005, 0x0) close(r1) open(0x0, 0x141042, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x82001d00c0d0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$netlink(r2, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r3, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000540)=[{0x18, 0x29, 0x39, "1f020201"}], 0x18}, 0x0) lsetxattr$security_ima(0x0, 0x0, &(0x7f00000003c0)=@ng, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f0000000040)) write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) 21:06:59 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) sigaltstack(&(0x7f00002d5000/0x1000)=nil, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000300)=r6) 21:06:59 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) close(0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:06:59 executing program 1: tkill(0xffffffffffffffff, 0x33) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r0 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0xb1, 0x20100) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) dup2(r3, r2) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000440)="73639badc4a5fc96cdfbe11741486874f51bea9bc0a9a2d7121b485a3d32dae1fd314768ea3ba5700a91c6f2876e184740d8e9bcdeb81ec3a4b64b1ea63823fc2c85cf0703650903a333ce1c", 0x4c) setpriority(0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x8400, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a363a00f980f1b8939885ccbb3c3aeead2e22c90fef072256e00e678290f5bb3b5d2fcf887ffa7f0e5b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561a89021a7503a9fc0b01542ab5bd2d23e04b258634bd754c9d2488ad379fadccbfda227bd28f64dff4f39b07fb8286b5f0876a20b9c01607839eaecf5034b7d6979a3687c0fee1514c1c9bb495bb16aa5918341ce8a3d50bd48827a0e142efb278c334ed7c6a4433ae9eabb1ef6d23dcb0c5508c69f31649fac5b3a633f0a72be5a2c877317f609df6ad04d3ea9ffdad4dd"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfea1}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000451660d185069c26826a00000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000998b4292adaded2d7368abe8847100bd54c94384f593bb5a693e64640abb6072bef1"], 0x3c}}, 0x0) socket$inet(0x2, 0x80001, 0x84) gettid() socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCX25SCUDMATCHLEN(r7, 0x89e7, &(0x7f00000002c0)={0x1f}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfea1}}, 0x0) 21:06:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, 0x0, 0x0) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000f40)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000001040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x81}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80}, @SEG6_ATTR_SECRET={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x44042) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x4, 0x12464, 0x80, 0x4, 0x80000000]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x3}]}}}]}, 0x3c}}, 0x0) [ 655.423138][T18661] ubi: mtd0 is already attached to ubi0 [ 655.484852][T18670] binder: 18664:18670 unknown command 2052669451 [ 655.500679][T18668] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 21:06:59 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) close(0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 655.526607][T18670] binder: 18664:18670 ioctl c0306201 20000080 returned -22 [ 655.698194][T18668] 8021q: adding VLAN 0 to HW filter on device bond1 21:06:59 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)) perf_event_open(&(0x7f00000012c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x22123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000400)="a83729fa248479477ce9b659ff") mkdir(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20) sysfs$2(0x2, 0x4, &(0x7f00000004c0)=""/227) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x404001) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x100021, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, 0x0) semget$private(0x0, 0x2, 0x140) 21:06:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000033001d040000000004003f0000000000", @ANYRES32=0x0, @ANYBLOB="000002b70000000008000a0010000000140003006970766c616e31000000000000000000"], 0x3c}, 0x1, 0xf0}, 0x0) [ 655.822533][T10035] libceph: connect (1)[d::]:6789 error -101 [ 655.829076][T10035] libceph: mon0 (1)[d::]:6789 connect error 21:06:59 executing program 2: r0 = getpid() r1 = getpgrp(r0) setpriority(0x0, r1, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x90c40) memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000340)) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r3 = getpid() sched_setscheduler(r3, 0x0, &(0x7f0000000380)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0xfffffffd, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000005c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r4, 0x20, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r6) write$FUSE_ENTRY(r4, &(0x7f00000000c0)={0x90, 0x0, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0xff, r6}}}, 0x90) r7 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r7, 0x20, 0x0, 0xfffffeff000) read$eventfd(0xffffffffffffffff, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10f081, 0x0) r8 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r8, 0x10, 0x0, 0x10000101) [ 655.888657][T12870] libceph: connect (1)[d::]:6789 error -101 [ 655.898587][T12870] libceph: mon0 (1)[d::]:6789 connect error 21:06:59 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) close(0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) socket(0x2, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000540)=0x1401, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x5, 0x201085400b409c52) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={0x0, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5d}, &(0x7f0000000040)=0x8) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 21:07:00 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3, 0x2}}, 0x10) 21:07:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x4a3dcda5c4613b92, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x801}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000080)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000000)) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$netlink(r7, 0x10e, 0x4, &(0x7f0000000140)=""/199, &(0x7f0000000240)=0xc7) [ 656.425880][T18661] ubi: mtd0 is already attached to ubi0 [ 656.536478][T18708] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:07:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff44}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000007000000000020000000a64105001a000000057e510586bb388ffe3205588efc061930e81c0270fcc917d895c9ff0600000000000000e13d94c10ad2080e8de3c1145962eb3f54c3720deb0200007e875e85e25d95d0dd7e0516a2d2b51545b01eef53d06945e10b3d41154f57be1b64d6342b97b6042e0c5e5a009f8fec8fafc1ceaf13dbae15c88fb2349a516930bb6e2bc5a44d008e13a8e61986c568a54b000000000000000000000000000000007a888355c87b11c97ccba29620fcec460f75fef7e34e5790f65f9dca76b87fbad2ff978fd30c01686dbeffd640ee14ba30a716695f2b7cbca66f23d2c89a6857faa06a157c1845ae97699a4dab6dbd79f03e1f62e73c50df2311b008d18fa3cd75f0580213579a7b7a03c96421c60c5987afcd6233c21454de655bbe944ef5ffa2eb2b9e7579b5fc7ea55db11e027efe50336b150a1151ba1d84ff734434f9adc3d7e8a7fe554a69a6ebe0cc0d189aed1e058c0c4298cc23dbd4dc0e6647cfa1a1dc06bc6ad3c8"], 0x38}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x517480, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(r1, &(0x7f0000000540)='./file0\x00', 0xef6a7576d0774c80) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/466], 0x70}}, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="b4c5ba0c4fa1a76bf499fb8aee89d872ea91520e7db3a8af823f71d74edae24097705382c40cbb94fa2d6074fa933f90ba", 0x31}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000000c0)="bf8d87ac608f24154352de373c549ffb76ed50eccc250fe364ca9f60f47c6dcc7c0968e590d6c95590cfea114c82bc8f61da2beb3131edea0afb222e0c6225a02c7d9a4630cf9f2c2d2f98935fb80f004fac21", 0x53}, {&(0x7f00000003c0)="a22fb3a0ae0bbf46e8487f9add1f8eb5b99bfe271bf26c0dbed92520087914abc85be0668851385834f7c6d737aef5ba8877069ba02e2433eabba7f7dc7ad7cd5e1c2fc0187fc3b5c4d9be399a32b226162e3a819568ddd546ad1a59df4314dd8d3a01891c50153fea476bb0438944e55addff28d73650152c205b9469ac829461737fc2974305e596165eb4b005ee6ed8b5da66028f9d42e632a98a64d144b556796a87824772232b2766e93ad1a38ee49eb3a220ef0e68b62d586ea1f5fe14aedcfdf60182fe24cb7e615662ad670c28414fc23182dbd8d85e9a182049da575f43afc63aaeea874aac6593219ae3d141", 0xf1}], 0x4, &(0x7f00000017c0)=[{0x108, 0x108, 0x9, "547e7ae3781b925b939c1a2800df09fdee2383a862371a9ae7848dd39da04668e00f416fa74af5896d012b01709ffdee2e1db05f10beb54037164c746272157a12db9a56d7aaa7370af1e3e506cd98040c8cc9604c6776ce589a0c78fafddc632999190f265ebfe86c448517c07aae7f9e3e61e2fe2bc5a41f7b01513e3d97b5b4d4e6c455d52979086d388a3d7b1c757a6d460668cddf4532b37b4e20341729c46f2d389e5b523030c986154f04235220ae631208e9424292a9673be89af4a0018862c7316a8ec1d98c15eb4228708284144b12ab3e50657d24656e6a3ec5f7f6358ec742135fa3dab918a66351e1ad34"}, {0xa0, 0x29, 0x6, "8a5fe2e85e5df3047ebe605c2588d0ddef17b1acfb807994be355652cfb03298901550ccd623fd07e87302980e16555009dd0686d63faa64d23f925c410c2a908cdb9c8b2e201c08ba5b32edc2a35db779f1fcb8464ab107c885703e06f01af2329128e6c9f5afbc7c01fb73361541e28b13d81c6b19e235183641512bf62a1daa37c9f3c22a66994148"}, {0x80, 0x100, 0x80000000, "3c4bec60f5034eadf329df8219f5f442d88975c6814ca2faf68d3a87bb67c94fdb9d67ba34c32f067777a06e2f473830ade8649c243a58817cf0d2eb2c2439855b6561ef09a1ded605ac7180abd4f317e687cad44281564b133ac4231b44b365ceea682e45a3fde6c0ebc230c82326"}, {0xa0, 0x119, 0x8, "c9f07499b38bed4291b821df506b8d3ffe355eb9a7ab102f5592b437d951f47bb1f9e678fd33e24b3e57aba48473e7efb3eb22fd4f602e9eee1498794047c956d7f520fc366e0061999a423fd4ad4bd4e7e1798cee0dc4c49580e318ccd1a30b42f2129b25d4ed79571fb41b965bbaa215802c5940fd7a5b52dc622ccbbe2c212c8e4934b822e0dbc5a900"}], 0x2c8}}], 0x1, 0x11) 21:07:00 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 656.816604][T18722] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 656.827524][T12870] libceph: connect (1)[d::]:6789 error -101 [ 656.833730][T12870] libceph: mon0 (1)[d::]:6789 connect error [ 656.980696][T18662] ceph: No mds server is up or the cluster is laggy [ 657.161217][T18722] bond2 (uninitialized): Released all slaves 21:07:01 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4a62, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1) ioctl$EVIOCGPHYS(r4, 0x80404507, &(0x7f0000000100)=""/177) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xfffffffffffffffd) fallocate(r0, 0x10, 0x0, 0x200) 21:07:01 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80800) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ustat(0x7, &(0x7f0000000240)) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="01200037b99906bdaa1b48c9a1af2cdc3626722292157b481e119524e13f64d390f06d38a5ce2decf0d72ab1ef44aa2b3dc981dd08bb12c6470c8c0b1a352036ba83b7ec86c02fbe23ac6c1ab67a", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r4, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r4}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r4, 0x677}, &(0x7f0000000180)=0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r5}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r5) [ 657.435668][T18723] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:07:01 executing program 0: epoll_create1(0x0) r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) bind(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local}, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind(r1, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80) r4 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r4, r1, 0x0) [ 657.556581][T18739] ubi: mtd0 is already attached to ubi0 21:07:01 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x1d7) r1 = getpid() sched_setscheduler(r1, 0x6, 0x0) r2 = syz_open_procfs(0x0, 0x0) getpid() syz_open_procfs(0x0, &(0x7f0000000340)='fdinfo/3\x00') io_cancel(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x801, 0x84) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000240)={0x0, 0x4, 0x8, 0xffff, 0x3f, 0x8, 0x2}) sendmsg(r3, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000003}, 0x0) fcntl$setflags(r2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fsetxattr$trusted_overlay_origin(r7, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x4) write$P9_RSTAT(r7, &(0x7f0000000280)={0x58, 0x7d, 0x1, {0x0, 0x51, 0x5, 0x5, {0x8, 0x3, 0x8}, 0xa000000, 0x6, 0x7f, 0x200, 0x9, 'fdinfo/3\x00', 0xa, 'selfvmnet0', 0x2, 'y\x00', 0x9, 'fdinfo/3\x00'}}, 0x58) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 21:07:01 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 657.684326][T18739] ubi: mtd0 is already attached to ubi0 [ 657.978007][T18755] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 658.217556][ T27] audit: type=1800 audit(1583528822.086:2435): pid=18699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17469 res=0 21:07:02 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fuse\x00', 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x3}}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48003}, 0x4000000) gettid() prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000003c0)) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000140)={0x80a9, 0x9, 0x1, 'queue0\x00', 0x4}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) dup3(r4, r5, 0x0) dup2(r1, r6) 21:07:02 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_tos_u8={{0x11}}], 0x38}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x327002, 0x0) connect$ax25(r1, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 21:07:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000800)={0x81, 0x9, 0x4, 0x2000, 0x8, {0x77359400}, {0x3, 0x1, 0x2f, 0xff, 0x6, 0x0, "2d96db88"}, 0x2, 0x1, @fd=r3, 0x1, 0x0, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000880), &(0x7f00000008c0)=0x4) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='auxv\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x0}, 0x20) sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000040)=0x0) ptrace$setregs(0xf, r8, 0x0, &(0x7f0000000600)="eb97119b8374ba7cd11b93f6c2673ff65bcf9bdea81569127a6728a737fa55a438ffc1af8bd8a7d3b130a01bc599fd9cc47bdcbefa7e274da69d7f15aeb31b979229a26a400f7afdcaa20e0e7926f9c71ad37ebbebb1200bf1d58f683c8fbecee35f2b8f5d75729934b2f1bc09435ea7b50a54c2f8d03f3dd97fd42a68a237793d0c663be1f4dfbed75204019567c11f6efc16f0c3b2c9f02ef1b6c32f2800aa7f16d3131a66d03e3f1b1bc7d9fcd5bd382bb6431452c9103018deeae8b238a50b1c570c974beba084ade9e6176a8091671ebdd16da3bd5d3492e9567d1be7e150bd271a09e2e6352d559a69") r9 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r6, 0x0, r9, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) symlink(&(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100)='./file1/file0\x00') r10 = open$dir(&(0x7f0000000300)='./file1\x00', 0x0, 0x0) mkdirat(r10, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(r10, &(0x7f0000000380)='./file1/file0\x00', 0x0) r11 = syz_open_dev$sndpcmc(0x0, 0x0, 0x8000) getsockopt$inet_mreqn(r7, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @dev}, &(0x7f0000000240)=0xc) ioctl$BLKPG(r11, 0x1269, &(0x7f0000000080)={0x5, 0x0, 0xda, &(0x7f0000000400)="51daf16f60a6af36f789b9427683fbb116573dadce7d6e89fc67f7ff9dfffb7d28758a3dc9f00d948a310f5d69f03b78df66aa0cb18166cdcf5b3f29d14b9057eec6bd3b2c9d2222a4758ca90f0f4be510b3c392a00bd4e598ee9a1d798fb8509fab7f29728b705a67072a5af47df7937987534503aa2b63c2a8196a3755758a8848cf79ca23ac20e0c05cfa48c9908ac8a785432c5dbe7f5ffb9b22952da6963a6a116f13e93e456f1f546873db1ef4f797e7bb3b9ff892eeb9d0d52de194e958c4eecaefee9a28e4c96003a177be6e1ecf3335ba7c0bb22380"}) socketpair$unix(0x1, 0x0, 0x0, 0x0) renameat2(r10, &(0x7f0000000000)='./file1/file0\x00', r10, &(0x7f00000001c0)='./file0\x00', 0x2) 21:07:02 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:07:02 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 658.258490][ T27] audit: type=1800 audit(1583528822.086:2436): pid=18727 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17469 res=0 [ 658.320885][ T27] audit: type=1800 audit(1583528822.116:2437): pid=18713 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17469 res=0 21:07:02 executing program 3: sched_setattr(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f00000002c0)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], &(0x7f0000000080), 0x80000000, 0x0, [], 0x1}) fchdir(r0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x40000000000000a1) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) r3 = io_uring_setup(0xa4, &(0x7f0000000100)={0x0, 0x0, 0xb, 0xfffffffd, 0x220}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000280)=[r5, 0xffffffffffffffff], 0x2) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) r8 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x40000000000000a1) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x400002, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r9, 0x3, 0x0, 0x0) r10 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x40000000000000a1) io_uring_register$IORING_UNREGISTER_FILES(r10, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x40000000000000a1) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, 0x0, 0x0) listen(r11, 0x0) accept4(r11, 0x0, 0x0, 0x0) [ 658.421338][T18773] ubi: mtd0 is already attached to ubi0 [ 658.429047][T18775] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:07:02 executing program 0: socket$kcm(0x10, 0x0, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="d4df3ebdd1dc05356d0353fb085b71dd7ec806cb7bf4b73ba0c11f3519c9610c9b03e49f937ca87ea670b4b06ecd306473378fced3776c3b42b97aa9345fb5d2e735fc9c33ccc416b3e403cecba77582dc376eee24e3a6cfcbf8d8960fa64860c6e8722b27bdc9616b40ee324a689c35394e56a697dbcd255a4b182190df47dea382c749e117e25063c2b9681d58d1534bb1d623daf1c741", 0x98}, {&(0x7f0000000000)="bfb6d60a91106921b9b9a1289ea4927c07395862e4b6300ad103063ea4fa864c526b8e8d59c428dca6f8ff26601dbf23f0ac23a0c18541c2df73a7c64d7d3707ce986db4a946d9029d8a2cbad3a543c92399fc374ed09cbc511ac20aeb2b7a80751737f1", 0x64}], 0x2, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) 21:07:02 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:02 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffdf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xb, r2, 0x3) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r4, 0x8001, 0x0, 0xffffffffffffffff}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000400)='syz1\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f00000003c0)=0x2, 0x4) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0xc) splice(r2, &(0x7f0000000040)=0x4, r8, &(0x7f0000000480)=0x9, 0x4, 0x9) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000000500)={{0xa, 0x4e23, 0xfffffffd, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, 0x4, [0xff, 0x2, 0x3, 0x3, 0x0, 0x53c3af69, 0xef, 0x2]}, 0x5c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100004a", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r13, 0x6}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r12, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r13}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000580)={r13, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000640)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000680)={r14, 0x3}, &(0x7f00000006c0)=0x8) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0xc34581e0282b5469, @thr={&(0x7f0000000180)="8e739d3b0501399a78d8915d7b5878bbd529f799a41005eb3a684bb11e75d6159f69484846b01b11d26d30072d152fdca48f6670f8e9f1292e8807cefc5abb1f3ecf4d56f70312579ae06ced94944b509062c47994216e2fe0fbc50bf9c8164f8b71e159cfb1e6b558e7e86c2146268e3da69c21a3583f02e189aaf0f21d2b45d6873840f6e596fd8c1cd597aa695a778d919f3c765f4614993b57f70415099caa61032644393049f2870b200c1132acbd3575d3fa4874747cd2143e460200008e11369748993b0e1c15e4f0c99a686d75cc7940ffb740", &(0x7f0000000280)="42a99f8b0f563460d1304b2999f40700000000000000d82c0312b74d058aa668a7c51130031853211e91f04725993be69c21575207e13f09754b661f714ddbf4c7ba10ff246cf14e873059e6930e2d"}}, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000000)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r15) [ 658.935160][T18797] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:07:02 executing program 4: openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:02 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x2a, &(0x7f00000001c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="2aeb79977f540f1d4202244d43bf2601b16bcd08eed55ab3628a1b627cc006da55005ab855f37038b1fa5d0f900f4f8d1bbd77feec2cc31d366ce966c76eb3a41cd86476f2b8ca70d841d414f1a6c81f0000000000000037cb2ce83d7aef6ff4a4c0426bf92210352ee8514a7a0c76832687dd9024a82a3aa45e19f0d4a772e7e2c79ffbf3b84045248cdaedb56c7639a23d1ae317bc954a645bd3f36334e4877d2c28dd614cbd9d77fcd6c5e15e5eac80fbd4821d5d4d5ffa3b04942ac82226e649825ee52a61551360f6ffb70a5f99ccd7e5e400000000000000"], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000000280)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/233, 0xe9}, {&(0x7f0000000340)=""/6, 0x6}, {&(0x7f0000000480)=""/112, 0x70}, {&(0x7f0000001680)=""/94, 0x5e}], 0x6, &(0x7f0000001780)=""/243, 0xf3}, 0x10000}], 0x1, 0x3, &(0x7f0000001880)={0x0, 0x1c9c380}) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x70, 0x2, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_MASTER={0x34, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_ID={0x8}]}, 0x70}}, 0x0) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x14}, 0x14}}, 0x0) ftruncate(r4, 0x10099bb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000018c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000001900)=0x10) sendfile(r0, r4, 0x0, 0x88000fc000000) [ 659.165266][T18813] ubi: mtd0 is already attached to ubi0 [ 659.274806][T18813] ubi: mtd0 is already attached to ubi0 21:07:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) r4 = signalfd4(r3, &(0x7f0000000100), 0x8, 0x80000) sendfile(0xffffffffffffffff, r4, &(0x7f0000000140)=0xf54c, 0x400000000) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) [ 659.341253][T18820] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:07:03 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001, 0x0, 0xffffffffffffffff}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r4}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r4) 21:07:03 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246) r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0xfe96}], 0x1, 0x81003) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x102002700) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f00000000c0)={0x2, 'vlan0\x00', {0x9}, 0x6}) getpeername$unix(r3, &(0x7f0000000000), &(0x7f0000000080)=0x6e) [ 659.671987][T18842] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 659.684907][ T27] audit: type=1800 audit(1583528823.556:2438): pid=18819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17501 res=0 21:07:03 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002702000020feffff7a0af0fff8ffffff79a4f0ff00000000b70600000018d1fe3d7a0500000000004504000000ffffffd404000040000000b704000010000020720700fe00000000850000002e000000b7000000000000009500000000000000ba"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 21:07:03 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xfb) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bond0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000002, 0x3, 0x80000000002) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x10b900) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000180)=0x40) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r8, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000080)={r9, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x1}) [ 659.758432][T18841] ubi: mtd0 is already attached to ubi0 [ 659.839443][T18841] ubi: mtd0 is already attached to ubi0 21:07:03 executing program 3: r0 = socket$kcm(0x2b, 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) socketpair(0x1, 0x80002, 0x21, &(0x7f0000000080)) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x101040, 0x0) write$P9_RWALK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="570000006f010006000201000000050000000000000000030000000100000000000000020100000002000000000000000101000000040000000000000000000004000000000000000000800000deff0400000000000000"], 0x57) 21:07:03 executing program 4: pipe(0x0) close(0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) 21:07:03 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)={0x1, 0x2, [@dev={[], 0x2f}, @broadcast]}) 21:07:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0xfff8}) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) close(r2) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x2d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:07:04 executing program 4: pipe(0x0) close(0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) [ 660.246841][T18868] ubi: mtd0 is already attached to ubi0 21:07:04 executing program 3: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r9) getsockopt$IP_SET_OP_GET_BYNAME(r9, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRESDEC=r6], 0x2) 21:07:04 executing program 4: pipe(0x0) close(0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) [ 660.527856][T18868] ubi: mtd0 is already attached to ubi0 21:07:04 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:04 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 660.806258][T18878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.011240][T18903] ubi: mtd0 is already attached to ubi0 [ 661.084041][T18903] ubi: mtd0 is already attached to ubi0 21:07:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2}, 0x0, @in6=@rand_addr="00ece300", 0x0, 0x0, 0x0, 0x2, 0x0, 0x7ff}}, 0xe8) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 21:07:05 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:05 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2ebc6a", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fbdbdf25090000001c0003800800020000000000080002000000000008000200000000000c0006800400020004000200"], 0x3c}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) r0 = dup(0xffffffffffffffff) getpeername$inet(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00830b0000000000005400614fed2ab1250f000000080006000000000008000000050000002400028006000e000000040004f3ffff0700070009000000060002004e2200000800050000ed073e4a6393d945d32993c8e18e246851000500b6bdb34a0826d81241864ee023af3971facedee60ae001be5287dbf86aaa3c01904110d8302b1a87934f28aea57b01a23c38c2919281b3"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000240)=0x9) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) 21:07:05 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x84000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000300)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="74000000000000000000000000006e82a69ea35f", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) bind(r3, &(0x7f0000000080)=@ll={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x80) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x2c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}, @TCA_U32_SEL={0x14}]}}]}, 0x58}}, 0x0) recvfrom$packet(r0, &(0x7f0000000180)=""/230, 0xe6, 0x2002, &(0x7f0000000100)={0x11, 0x7, r8, 0x1, 0x7, 0x6, @dev={[], 0x2f}}, 0x14) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$inet_udp(0x2, 0x2, 0x0) close(r11) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x1, 0x8, 0x201}, 0x14}}, 0x0) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0xffd7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) splice(r9, 0x0, r11, 0x0, 0x80000000, 0x0) 21:07:05 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x6, 0x401, 0x100, 0x20}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={&(0x7f0000001380), 0x0, 0x0, 0x0, 0x0, r2}, 0x38) r3 = dup2(r1, r2) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000580)={0x4, 0x5, 0x4, 0x1, 0x8, {0x77359400}, {0x3, 0xc, 0x0, 0x40, 0x81, 0xc9, "53249292"}, 0x10000, 0x1, @planes=&(0x7f0000000400)={0x9, 0x7a, @mem_offset=0x6, 0x8}, 0x1, 0x0, r3}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x7) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x4e21, @multicast2}, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x101}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$BLKPG(r0, 0x1269, 0x0) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000480)="680294a336a1d0e5f15b469ddeb7895a63bc8b48ae6b2fbd1d7c3d878a09a030de999bf44b17efb60450958485aa56389e910bb9f1d99a0fd1061aa6dffda7988e8786aff180842ece11ead980ef52b15a8ac6966c963f4b266a7288c4c9ac4d7f980fecdfedc6372b3cd78cb3e4ad0012cb0d5777ec049785be6df29402589f68264b7547a18c80dfcc52a947361002303bc7fbaa95332bc4f4d12988e620895ba7bc183d5f05fdf63e00f4f479be985244e01d71d0848ca8ed02d74b6ad3e2e19108163c016b6bbb7b2b2c9543719942612f9ffe609c9ffc94bc56acd2c91ef0d998d6e292e4433595c5ee10117d6d6853272812fc2f2abe513f138b", 0xfd}, {&(0x7f0000000100)="d10bcee1e29d4128327c2cb1bd1df1e9bbfb67aa05e818d49e70b86048cf023eb73b3af76b96b29f2637f8064cf8c7b846", 0x31}, {&(0x7f0000000a00)="345c2d8464d48dbe1db4ec986cf95cb03f41a44dfbabe12014ed2e94adaefd4ac9ce7a66fa2ca9a0ec6aa8d43a4664839a6d491b7eb05c4fcc319d152e6c4a15faff7e62a8e70dc01dfd2cad7c4076640298660cac28e6120ee3be5d6a4bc89a84bf1f4fe1648ebb65117c71a567950eebb384cdad5a0c659f1a73c36b9cd4ec918859b1a1c3f58b8d72591bf8ca7b353101d8c0f9fb5dfde7a88c3da8f2640a035d27600aefcac52dbddc6e9ec705e6f4ea30fb154104518c7064872fbfcc5eeafb78e09c980cdafd6d6233df114d5c8d9004fb511bc6299fa3a6", 0xdb}], 0x3, 0xd) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) r6 = getpgrp(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) perf_event_open(&(0x7f0000000640)={0x1, 0xffffffffffffff38, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x2}, r6, 0x0, r8, 0x4) r9 = getpgrp(0x0) setpriority(0x0, r9, 0xffff) open(&(0x7f00000001c0)='./file0\x00', 0xce4ab23002368521, 0x34) socket$isdn(0x22, 0x3, 0x25) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 21:07:05 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ff, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:07:05 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(0xffffffffffffffff) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 661.709157][T18917] ubi: mtd0 is already attached to ubi0 [ 661.743702][T18917] ubi: mtd0 is already attached to ubi0 21:07:05 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) semget(0x3, 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1f}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4100, 0xfffffffffffffffe, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="5562ef63bce2f3e9e6bc7f7e055366b0521eb83b3f56b3f2c6f84f95af09615fa986cca4f98d9efb65f8b5df77be47cacc7f2505e21f56b35f7bbbec0b13fa1da85bd9d2c5d91b59131b6b818ca931f3086184106aae6d5529de3c38605a819681b30802") sched_setscheduler(r4, 0x6, &(0x7f0000000000)=0x2) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:07:05 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:05 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) set_mempolicy(0x5, 0x0, 0x100000000000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x8, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x430c1, 0x0, 0x0, 0xd, 0x0, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) dup2(r0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200)='NLBL_CIPSOv4\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000002c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x14, r4, 0x200, 0x70bd2a, 0x25dfdbfe}, 0xfffffffffffffea1}, 0x1, 0x0, 0x0, 0x40}, 0x88) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xc40, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r7 = msgget$private(0x0, 0x10) msgctl$IPC_RMID(r7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000540)={0x6000, &(0x7f0000000380), 0x8, r11, 0x43ef156ed3a9fb22}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$KVM_HAS_DEVICE_ATTR(r13, 0x4018aee3, &(0x7f0000000340)={0x0, 0x6, 0x2, &(0x7f0000000300)=0x3}) 21:07:05 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) shmget(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfdef) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f00000017c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="040000000000ffdbdf2508000000b80005002c000200080004000005d797a3d0bc201a56cbaf91802c0000000800030001000000080004000700000008000400c5040001080003001f000000240002000800030007000000080003000100000008000400000000000800030009000000140002000800030007000000080003007f00000007000100696200000c000200080001000e0000003c00020008000200135400"], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r2, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) r3 = open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) pipe(0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r5) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000200)={0x5, 0x2, {0xffffffffffffffff}, {r5}, 0x6, 0x5}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100049d23000000040004200000000008000100c059dc22e3e1b021e70e82d727d2a4a0508c70eac74bd6cc4ca994952a435d44d1d7a09da552f35a706a8445481dd3542e3a3b90be9f9f45e6ee0300a623544104e0189fa4506c1660231023ec74392adb8a084ef921cc071991b49bf176190e8c141b46ff57aefb2df4d32ad98a210dddd3b813aa3022695727f8bfe5895c8a2ab5a2317e0747af06b0778924ba54307c4d08505da74f31ea8454fc1bfc7a68a0feb4bcadfe", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="08000400", @ANYBLOB="100000000000"], 0x5, 0x0) chown(&(0x7f00000001c0)='./file0\x00', r6, r7) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x24000080) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002400290800000000000000000400000008000c00", @ANYRES32=0x0, @ANYBLOB="08008200", @ANYRES32=0x0, @ANYBLOB="616e8ce26331c8d4e34ba31d7e9cc961056963a71ba898af81d2fdc32c2a8f73d1687605bdf7a67f5c"], 0x24}, 0x1, 0xffffff7f0e000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) fcntl$setlease(r10, 0x400, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x111201, 0x0) 21:07:06 executing program 1: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r0 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x88000fc000000) write$binfmt_misc(r0, &(0x7f0000000480)={'syz1', "92a39c8162a50ac24c15a47d43966f862ef44eb60374becc4ba929ff2792156f405ab453de953bc15f0548bee62adf9cc5ef902717aadf7c590b989e635165f1ab663733cfbeb9467c11bca57ecf92916d9756e81ed28e05d5bc2f22e36bec6197428dc3fcb93175c92b66ed36703daf1d85fb79c83e46d253a0645a3ecb34dc76138ed5608421e86e2f7698bd7f2538cd7fa3aff7be16275a59dd"}, 0x9f) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x1, 0x23e, 0x3}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f00000000c0)=0x73058cdb, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000002c0)) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000080)='ceph\x00', 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000340)=ANY=[@ANYBLOB="5b643a3a5d2c303a3a363a00f980f1b8939885ccbb3c3aeead2e22c90fef072256e00e678290f5bb3b5d2fcf887ffa7f0e5b5a64b0491236a3645b3cb24200b5a1c6aafda946ebf888518b9b1ad3e4a3b1caa195a69561039f6e507eafa89021a7503a9fc0b01542ab5bd2d23e04b258634bd754c9d2488ad379fadccbfda227bd28f64dff4f39b07fb8286b5f0876a20b9c01607839eaecf5034b7d6979a3686a0feeac04a641cd5e133437fd1514c1c9bb495bb16aa5918341ce8a3d50bd48827a0e142efb278c334ed7c6a4433ae9eabb1ef6d23dcb0c5508c69f31649fac5b3a633f0a72be5a2c877317f609df6ad04d3ea9ffdad4dd"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 21:07:06 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x121041) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000100)={0x20, {{0xa, 0x4e24, 0xff, @remote}}, {{0xa, 0x4e21, 0x9, @empty, 0x9}}}, 0x108) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x52, 0x0, 0x0, {0x0, 0x100000000000001}, {0x0, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) write$evdev(r0, &(0x7f0000000040), 0x373) 21:07:06 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0xfe) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r3) recvmmsg(r3, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/165, 0xa5}, {&(0x7f00000002c0)=""/224, 0xe0}, {&(0x7f0000000500)=""/141, 0x8d}, {&(0x7f00000005c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000780)=""/161, 0xa1}], 0x6, &(0x7f00000008c0)=""/184, 0xb8}, 0x5626}, {{&(0x7f0000000980)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000a00)=""/75, 0x4b}, {&(0x7f0000000a80)=""/110, 0x6e}, {&(0x7f0000000180)}, {&(0x7f0000000b00)=""/38, 0x26}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x6, &(0x7f0000001bc0)=""/119, 0x77}, 0x7ff}, {{&(0x7f0000001c40)=@hci, 0x80, &(0x7f0000002180)=[{&(0x7f0000001cc0)=""/143, 0x8f}, {&(0x7f0000001d80)=""/96, 0x60}, {&(0x7f0000001e00)=""/123, 0x7b}, {&(0x7f0000001e80)=""/16, 0x10}, {&(0x7f0000001ec0)=""/65, 0x41}, {&(0x7f0000001f40)=""/206, 0xce}, {&(0x7f0000002040)=""/86, 0x56}, {&(0x7f00000020c0)=""/151, 0x97}], 0x8, &(0x7f0000002200)=""/151, 0x97}, 0x100}, {{&(0x7f00000022c0)=@un=@abs, 0x80, &(0x7f0000003440)=[{&(0x7f0000006200)=""/70, 0x46}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/58, 0x3a}, {&(0x7f0000003400)=""/1, 0x1}], 0x4, &(0x7f0000003480)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000004480)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004880)=[{&(0x7f0000004500)=""/241, 0xf1}, {&(0x7f0000004600)=""/96, 0x60}, {&(0x7f0000004680)=""/174, 0xae}, {&(0x7f0000004740)=""/45, 0x2d}, {&(0x7f0000004780)=""/219, 0xdb}], 0x5, &(0x7f0000004900)=""/46, 0x2e}, 0x14}, {{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f0000004940)=""/35, 0x23}, {&(0x7f0000004980)=""/17, 0x11}, {&(0x7f00000049c0)=""/14, 0xe}, {&(0x7f0000004a00)=""/214, 0xd6}, {&(0x7f0000004b00)=""/202, 0xca}, {&(0x7f0000004c00)=""/193, 0xc1}], 0x6, &(0x7f0000004d80)=""/248, 0xf8}, 0xffff}, {{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000004e80)=""/173, 0xad}, {&(0x7f0000004f40)=""/106, 0x6a}, {&(0x7f0000004fc0)=""/76, 0x4c}, {&(0x7f0000005040)=""/180, 0xb4}, {&(0x7f0000005100)=""/155, 0x9b}, {&(0x7f00000051c0)=""/26, 0x1a}, {&(0x7f0000005200)=""/237, 0xed}, {&(0x7f0000005300)=""/105, 0x69}, {&(0x7f0000005380)=""/134, 0x86}], 0x9, &(0x7f0000005500)=""/49, 0x31}, 0xffffffff}, {{&(0x7f0000005540)=@in6, 0x80, &(0x7f0000005ac0)=[{&(0x7f00000055c0)=""/59, 0x3b}, {&(0x7f0000005600)=""/49, 0x31}, {&(0x7f0000005640)=""/111, 0x6f}, {&(0x7f00000056c0)=""/134, 0x86}, {&(0x7f0000005780)=""/235, 0xeb}, {&(0x7f0000005880)=""/90, 0x5a}, {&(0x7f0000005900)=""/205, 0xcd}, {&(0x7f0000005a00)=""/156, 0x9c}], 0x8, &(0x7f0000005b40)=""/36, 0x24}, 0x101}, {{&(0x7f0000005b80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000005c00)=""/44, 0x2c}], 0x1, &(0x7f0000005c80)=""/168, 0xa8}, 0xb2c}, {{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f0000005d40)=""/190, 0xbe}], 0x1, &(0x7f0000005e40)=""/196, 0xc4}, 0x10000}], 0xa, 0x1020, &(0x7f00000061c0)={0x0, 0x989680}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x12000) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @dev}}}, 0x48) fanotify_mark(0xffffffffffffffff, 0x142, 0x101b, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="ed8ed24112ccba9ecbaea5e8dd24f24b3ac27bc81c2b7c8c5b06d007e4c0072fab72c7d711beb15f4313966fe3a4fa21e76fc4d05e10fac82d5e075205917f03000000030b6daa6e72ad000000610000000000000001a25a382ed7fbcbbc4e5508505d0cb26f5521b1ac0543978e05e200f2ef4214efd76167e74735bfeb92974cfcaadd589f252c8b00b693479bfe5d85dc391a000000000000000000000000001200006ff084b1b5abdcac51fff4ad804a4f326d9c872a7524790930e0eb7f25ea6f91454734815c0437dcb712e81b202f045500b00a094f53cfe0935fd965c972c7a49b378a4b994390d87c09d66c2646bb070ef7419a96812b6bde0409afc4deb78e57f822ddb6d7d74bf4987db4e5261d7190bddad7c21133e8bd80835b167712ea422d6c"], 0x127) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000180)) 21:07:06 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:06 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x1, 0x28, 0x8, 0x800, 0x401, 0x1f, 0x0, 0x6, 0xbb}, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r5}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r5) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) 21:07:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x9, 0x2b}) write(r3, &(0x7f0000000100)="94211bf8096545575fe73d03b16c740bfc817eac3f14caddf924c93d526ef7517f450a5ea777a48db89a3f3032602e826a09c08f29518accb6741c11582f5dc3ec2bf68849c6e11f34", 0x49) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008d}, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000080)={{0x3}, 0x20}, 0x10) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x1, 0x0, 0x3, 0x7fffffff, 0x0, 0x8, 0x0, 0x1}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@fscache='fscache'}, {@access_any='access=any'}, {@noextend='noextend'}]}}) getresuid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)=0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r6) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r7, 0x80487436, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) fcntl$getown(r10, 0x9) r11 = dup3(r2, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) 21:07:07 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) [ 663.215914][ T27] audit: type=1804 audit(1583528827.086:2439): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/270/file0" dev="sda1" ino=17480 res=1 [ 663.224595][T18979] ubi: mtd0 is already attached to ubi0 [ 663.348154][ T27] audit: type=1804 audit(1583528827.136:2440): pid=18983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/270/file0" dev="sda1" ino=17480 res=1 [ 663.600968][T18960] ceph: No mds server is up or the cluster is laggy 21:07:07 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) [ 663.701495][T18993] ceph: No mds server is up or the cluster is laggy 21:07:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) splice(r2, 0x0, r3, 0x0, 0x100000002, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, [], 0xb}, 0x7}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xce, 0x681, 0xe71, 0xe0}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000014) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x29ef}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x44091) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x4c, r9, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38}]}, 0x4c}}, 0x0) 21:07:07 executing program 1: syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x40, 0x0, &(0x7f0000000200), 0x8040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x80800) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0xd, 0x0, [0x1, 0x3, 0x7fff]}) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 21:07:07 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x3, 0x3, 0x4, 0x800, 0x8a06, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x9, 0x3f, 0x6, "4f4638f0"}, 0x10000, 0x4, @userptr=0x100000000, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x1, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:07:07 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x2}}, 0x10) [ 664.012299][ T27] audit: type=1804 audit(1583528827.886:2441): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/270/file0" dev="sda1" ino=17480 res=1 [ 664.049683][T19008] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 21:07:08 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x8) [ 664.323631][T19019] ubi: mtd0 is already attached to ubi0 21:07:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000580), 0x0) rmdir(&(0x7f0000000480)='./file1\x00') stat(&(0x7f0000000500)='./file1\x00', 0x0) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r2, 0x1, 0x24, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, 0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @dev}, &(0x7f00000007c0)=0x10, 0x100000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000880)) lstat(&(0x7f0000000380)='./file1\x00', &(0x7f0000000980)) gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x0, 0xfffe, 0x100000005}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000700)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6, 0x400, 0xe, 0xd00, 0x7f, 0x0, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x6, 0x401, 0x0, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0xa08, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1f}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000240)='kfyring&-\x00', 0x0) add_key$keyring(0x0, &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) io_setup(0xfe, &(0x7f0000000200)) memfd_create(&(0x7f0000000900)='\x00\x05\xdb\x1f]\x0f>\x04\xdb\xbf\x02\x04\x80\xff\xc5\xaf\xe4*\xa6\n\xc1\x05\xdc\x87\x1ct\xea\b\xa1!3\\\xe9\xe7\xac\"\xed\x96F\xec\xdcd\xcan6\x1d\xb3|\xbd\xe2\xc6\xf3\t\xf7\x89K\xc5AG\xf2\xc2]{\xd8\x02iD\xb0\xefXv\x92\xc1\xceg\a\"\x0f\xe0\"w`6\x89', 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)=0x2, 0x4) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000640)) sendto$inet(0xffffffffffffffff, 0x0, 0x3aa, 0x0, 0x0, 0xfea3) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="f500", 0x10) 21:07:08 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) [ 664.427605][T19019] ubi: mtd0 is already attached to ubi0 21:07:08 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000000)=0x8) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$netlink(r5, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc) open(&(0x7f00000001c0)='./file0\x00', 0x100, 0xe9) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:07:08 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) 21:07:08 executing program 2: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8541, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x0, 0x26e, 0xac, 0x1, 0x40, 0xa183}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000780)={'wg0\x00', 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r9, 0x7}, &(0x7f0000000300)=0x8) r10 = openat$md(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/md0\x00', 0x0, 0x0) lseek(r10, 0x3, 0x2) vmsplice(r4, &(0x7f0000000700)=[{&(0x7f0000000340)="ec94294cd2bc0a843ec0054422c8216261989c1aee3877560471591a28dc76e3e6dae1d036e988918706c8e2595d18f2dae0fdbe83d5ac83105ff17c66aa08ef589ddedc1d8e51ac19d4de9c3c58aa5b2524587b7c0873a40efffd9278999a07987baa63da4f7d0c0a417835962489b8411bda4e532727ac14fc642300a039c380f2596457ec43e4109d876c58d4795a4f3a08e559896aecc32640ece652f06f3db244b3abb28ba7e255e3f4692cf8", 0xaf}, {&(0x7f0000000400)="d8f68eba78d2ab614ccebc69957ffa9326169ba7f513844092878f75d1978ac8ab4de1b7bff54e0205a482e50f5dcf881f35399dcffb193855c348638614d1e659b5ac7c7ff8cd08c3f7e8af8a4b007dfd3640e47558608c792040d9962a9b90f65fda7cbe044f12989984718dd5bc47aa0da83aadb3e094ef94ba264c310828348674fb309b2e0994bd3314f0d926bcc642fc79cc6011ddcdbd03f935dc0e7d6c0786fe34aeb1b91ce75732b770724439965f43", 0xb4}, {&(0x7f00000004c0)="18700f168bc4686b250e225025a9d32ae1a4a076eaaf0036d650036e0ecbf7f86a07ac64358b1e36d755ef063517c7148fd3d1aff860f27edf9f14a2078257d9fd", 0x41}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000540)="bee36320b22a6b58f97c92d8d0da177bceb0eb90cde6b3352cf9c6f6472cdc93f56153964c23bfec271765d4356e858bb6c0fb9c6bb0733aebf978d93f82c65613f9efec36c5549fd5b29b55bfc69a41137fb44d7ab6f13735d5c63d848dc4f5b99941c4b389fbc8a182ed16e6c27c03c9b4621fd62c25f255b63d722332ebf9c7ed72ad1e6a06d0af15306c9f80bb9a8d917d4c74c7", 0x96}, {&(0x7f0000000600)="01cfbd6e9d28b36f94ca9c0381ca09857e9718f55a14931f2d724aae600b1bba414368837a60144292582065d23d49f168ab5de980e2be2336d8f185ae9a199dbc01f6aeef48fa308ef65baaf6060dec490fa98e089b48323b49e65d5cefb1bd8cf76f2b7945c1038e7d5599290c6aa3981ac864fd17ab2aab301489c44ca17972e9ffbc3556ff9b0965", 0x8a}, {&(0x7f00000006c0)="17824d7b4e2f8cf4757c24e663a1c2", 0xf}], 0x7, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r9}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r9, 0x4}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={r11, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x80, 0x9, 0x0, 0x10, 0x6, 0x8}, 0x9c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @remote}], 0x30) 21:07:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x41028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_MASTER={0x8, 0xd, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 21:07:08 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) [ 665.004139][T19060] ubi: mtd0 is already attached to ubi0 [ 665.018178][T19059] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 665.060195][T19059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 665.098267][T19059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 21:07:09 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) 21:07:09 executing program 1: syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f00000001c0)="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", 0x200}]) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x6, 0x1, &(0x7f0000000180)=[{&(0x7f00000004c0)="9456a5ccbd1ec89c551d5c35608665c4ed4418e7998f35c18b96f0767bb5c2e9931a6eb12ad643f33f6529db7936e1349d10b322b351a3e05275a79efa20993c1d72f84f3149e28d8a7a3adedd9e1ce7d1006b097db8cb2010220c65a92dc62b6c95e7a0ea5791d08c272271060fb8fd5b2e9167f26b5c1cc20ae449e5f9d960b59099cdc4ef68fe2a843bbb462749879c51707179820a3057ad57546f696306c35350443685cb2a4725611137aab35503b34f82bf9aa7a7d63ec561f603b95651", 0xc1, 0xc3}], 0x290031, &(0x7f00000003c0)={[{@suiddir='suiddir'}, {@suiddir='suiddir'}], [{@hash='hash'}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x210400) accept4$x25(r0, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x1800) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000005, 0x10010, r0, 0x10000000) write$apparmor_current(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="70a2fc46cca5b6bcf7fc6270499165726d70726f66696c652000"], 0xd) [ 665.476181][T19071] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 665.501695][T19074] Dev loop1: RDB in block 0 has bad checksum [ 665.511285][T19074] Dev loop1: unable to read RDB block 1 21:07:09 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) [ 665.530455][T19071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 665.537927][T19074] loop1: unable to read partition table [ 665.551550][T19071] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 665.559282][T19074] loop1: partition table beyond EOD, truncated [ 665.597708][T19074] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 21:07:09 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) [ 665.771455][T19060] ubi: mtd0 is already attached to ubi0 [ 665.821127][T19074] Dev loop1: RDB in block 0 has bad checksum [ 665.828528][T19074] Dev loop1: unable to read RDB block 1 [ 665.837572][T19074] loop1: unable to read partition table [ 665.866864][T19074] loop1: partition table beyond EOD, truncated [ 665.879204][T19074] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) 21:07:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf003, 0x6c00000000000000}, 0x334, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ee30993ccbac0000000000000000000000000000b16025825d3c93fd84a3d6b445806de8de08c5d7fb9f2a50767740a3f09539ce69ff5356a8063e087561de73b882095f5af43cbf34babd9177901b288b329bf2a48603fa06bf78f4c738222ab3e288c0d1229df2070efda97a8aa037bffcea45fa646254697a8d74fb9b4d9c28daf16cc4193ce0b0c50c7d707720af9fecac6ae44b68bb56", @ANYRES32=r1, @ANYBLOB="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"], 0x42e}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 21:07:09 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0}, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x1d, @local, 0x4e23, 0x4, 'none\x00', 0x1b, 0x4, 0x42}, 0x2c) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000180)={'bond0\x00', {0x2, 0x4e23, @remote}}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r5}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r5) 21:07:09 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:09 executing program 1: creat(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x531a40, 0x0) io_setup(0x5ddb, &(0x7f0000000080)) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000000c0)={0x394, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffff99d}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @rand_addr="f66e6d3ac867056563315ba4899d328c", 0x9f}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6294}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c8c}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x1e8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @empty, 0xffff}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x62b, @local, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf70}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3f, @empty, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @ipv4={[], [], @empty}, 0xda28}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x90}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb97}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7c}]}]}, 0x394}}, 0x4000004) [ 666.102719][T19100] ubi: mtd0 is already attached to ubi0 [ 666.168307][T19100] ubi: mtd0 is already attached to ubi0 21:07:10 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/423], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d00001400000000000000000000000800120000000300000000000000000006000000000000000000000000000000000000000000000000000000000000f4ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02120000020000000000000000000000a950cfa9fb616d86a5d49f8b0c1a07043587e5dbcbfd0d9805396bf330298b654b960dac66885babe4dfa0744506e537be32dc9f9ca2f68cee78365a839f626d7188f4c51df11eb79905064a402738dcc63d2761ab0a101eb7ff9fbe800be09575f9e9cceeb0ae6239a67c04462df9445465095e638161f1fa68c8"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 21:07:10 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000240)=@nfc_llcp={0x27, 0x1, 0x2, 0x2, 0x5, 0xe6, "8b42fde994f046a251c1c0c863fcb99cb2c64e6b9ea47cef272e0ff6d7612dffda1703a265368304afbf64795b1a004f63586de7ceebf612e61cfc324b7058", 0x15}, 0x80, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x11b8}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f00000030c0)={0x67, @broadcast, 0x4e23, 0x3, 'wrr\x00', 0x12, 0x3, 0x5b}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000006fc0), &(0x7f0000007000)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="81000000", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r7, 0x7}, &(0x7f0000000300)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r8) clock_gettime(0x0, &(0x7f0000006ec0)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000006cc0)=[{{&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000016c0)=""/247, 0xf7}, {&(0x7f00000018c0)=""/223, 0xdf}], 0x2, &(0x7f00000017c0)=""/47, 0x2f}, 0x8e}, {{&(0x7f0000001800)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002b40)=[{&(0x7f00000019c0)=""/155, 0x9b}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/187, 0xbb}], 0x3}, 0x80000000}, {{&(0x7f0000002b80)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002c00)=""/113, 0x71}, {&(0x7f0000002c80)=""/112, 0x70}, {&(0x7f0000002d00)=""/205, 0xcd}, {&(0x7f0000002e00)=""/158, 0x9e}, {&(0x7f0000002ec0)=""/3, 0x3}], 0x5, &(0x7f0000002f80)=""/10, 0xa}, 0xfffffffb}, {{&(0x7f0000002fc0)=@isdn, 0x80, &(0x7f0000004140)=[{&(0x7f0000003040)=""/83, 0x53}, {&(0x7f00000030c0)}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/43, 0x2b}], 0x4}}, {{&(0x7f0000004180)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004200)=""/191, 0xbf}], 0x1, &(0x7f0000004300)=""/223, 0xdf}}, {{&(0x7f0000004400), 0x80, &(0x7f0000004640)=[{&(0x7f0000004480)=""/168, 0xa8}, {&(0x7f0000004540)=""/152, 0x98}, {&(0x7f0000004600)=""/46, 0x2e}], 0x3, &(0x7f0000004680)=""/147, 0x93}, 0xe99a}, {{&(0x7f0000004740)=@x25={0x9, @remote}, 0x80, &(0x7f0000006a00)=[{&(0x7f00000047c0)=""/215, 0xd7}, {&(0x7f00000048c0)=""/4096, 0x1000}, {&(0x7f00000058c0)=""/32, 0x20}, {&(0x7f0000005900)=""/228, 0xe4}, {&(0x7f0000005a00)=""/4096, 0x1000}], 0x5, &(0x7f0000006a80)=""/97, 0x61}, 0x6aa}, {{&(0x7f0000006b00)=@ipx, 0x80, &(0x7f0000006c80)=[{&(0x7f0000006b80)=""/250, 0xfa}], 0x1}, 0x4}], 0x8, 0x20, &(0x7f0000006f00)={r9, r10+30000000}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r11, 0x84, 0xa, &(0x7f00000000c0)={0x3f, 0x5, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x7, r7}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000001600)={r7, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}}}, 0x84) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) r12 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvme-fabrics\x00', 0x2d43e9b40386f585, 0x0) r13 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000006f40)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$PPPIOCGFLAGS(r13, 0x8004745a, &(0x7f0000006f80)) r14 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x8000, 0x0) poll(&(0x7f0000000300)=[{r0}, {}, {r14, 0x4002}, {r12, 0x9000}, {0xffffffffffffffff, 0xa}, {}, {r0, 0x408}], 0x7, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @rand_addr=0x3}]}, &(0x7f0000000200)=0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000024000505d25a80648c63940d0424fc600800184001ac0f00281982c137153e370907088000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 21:07:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffb}], 0x1c) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7a}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x6c}}, 0x0) r5 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000240)=0x4) kexec_load(0xfff, 0x0, &(0x7f0000000240), 0x0) r6 = dup(r3) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x15c, 0x4, 0x4, 0x101, 0x70bd29, 0x25dfdbff, {0xc, 0x0, 0x5}, [@typed={0x101, 0x55, 0x0, 0x0, @binary="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"}, @typed={0x10, 0x75, 0x0, 0x0, @str='userkeyring\x00'}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@multicast1}, @generic="94e4c0f0366a68699999ae4613ec409890378c3839595b2ef78f998bcd9b156265d80d926f0c558deae68fe6"]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x3352a65, 0xb, 0x4, 0x100, 0x762f, {r1, r2/1000+10000}, {0x3, 0x2, 0x9, 0x4, 0x7f, 0x3, "45e257da"}, 0xcb, 0x0, @fd, 0x7, 0x0, r6}) ioctl$PPPIOCGFLAGS1(r7, 0x8004745a, &(0x7f00000001c0)) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f00000002c0)={0x1, 0x2}) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000580)=@gcm_128={{0x304}, "96ec51e774db047f", "f1e6bc6055b5f3d68a351de28e283c2f", "cac4a85e", "c17b39086ee7dfe9"}, 0x28) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000200)=0x2, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 21:07:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x773e) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:07:10 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 666.769608][T19125] netlink: 12010 bytes leftover after parsing attributes in process `syz-executor.2'. 21:07:10 executing program 3: syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, 0x2, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000040000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}, {&(0x7f0000000240)="2e1d6e", 0x3, 0xcd}], 0x0, 0x0) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0xc0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 21:07:10 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:10 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r7) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000000)={0xfffffffb, 0x7, {r5}, {r7}, 0x4, 0x80}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="08000400", @ANYBLOB="100000000000"], 0x5, 0x0) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000100049d23000000040004200000000008000100c059dc22e3e1b021e70e82d727d2a4a0508c70eac74bd6cc4ca994952a435d44d1d7a09da552f35a706a8445481dd3542e3a3b90be9f9f45e6ee0300a623544104e0189fa4506c1660231023ec74392adb8a084ef921cc071991b49bf176190e8c141b46ff57aefb2df4d32ad98a210dddd3b813aa3022695727f8bfe5895c8a2ab5a2317e0747af06b0778924ba54307c4d08505da74f31ea8454fc1bfc7a68a0feb4bcadfe", @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="08000400", @ANYBLOB="100000000000"], 0x5, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="020000000900000000000000000000000000000007ffffffffffffff010000001f0000002d0000000000000000000000000000000200000000000000010400000000000003000000000000000500000001000080000000000000000001040000000000000100008000000000a30000000000000024070000000000000000000000000000080000008100000006000000080000006f000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="010000000800000000000000060000000000000008000000000000000e0000007f0500002f6465762f7562695f6374726c000000"], 0x158) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) r13 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r13, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r13, 0x8001}) ioctl$ASHMEM_GET_SIZE(r13, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r16) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r17}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r20 = dup(r19) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) r21 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r21, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(r20, 0x8901, &(0x7f0000000180)=r21) 21:07:11 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 667.290471][T19144] XFS (loop3): correcting sb_features alignment problem [ 667.315390][T19144] XFS (loop3): Mounting V4 Filesystem [ 667.344638][T19144] XFS (loop3): totally zeroed log [ 667.352192][T19144] XFS (loop3): Metadata corruption detected at xfs_agf_verify+0x573/0xa10, xfs_agf block 0x1 [ 667.362920][T19144] XFS (loop3): Unmount and run xfs_repair [ 667.368978][T19144] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 667.377123][T19144] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 667.386543][T19144] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 667.398745][T19144] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 667.408124][T19144] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 667.417648][T19144] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 667.427292][T19144] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 667.436936][T19144] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 667.446440][T19144] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 667.456325][T19144] XFS (loop3): metadata I/O error in "xfs_read_agf+0x211/0x570" at daddr 0x1 len 1 error 117 21:07:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c020040dc", 0xff0f}], 0xc102, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x0, 0x0, {0x17}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5683}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x24c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb9a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x11b7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xea}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9644}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd239}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x99}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x23d62d0b}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x81, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x95, @empty, 0x800}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2f8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c7f8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 21:07:11 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:11 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r1 = syz_open_dev$mice(0x0, 0x0, 0x41) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x3, 0x0, @local}, {0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}}, 0x48) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, r2, 0x0, r1, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01f4ff00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000280)='-:\x00', 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000", 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f30501000a0002", 0x17) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) write(0xffffffffffffffff, &(0x7f0000000200)="1f0000000106fffff13b54c007110009f30501000b000640000020230200", 0x1e) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r4 = socket(0x40000000002, 0x3, 0x2) bind$rds(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000540)}, 0x1) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x40002) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40801}, 0x4000080) poll(&(0x7f0000000180), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000)='/dev/nullb0\x00', 0x105042, 0x0) sendfile(r5, r0, 0x0, 0x80006) [ 667.898134][T19174] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 21:07:11 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg$can_raw(r3, &(0x7f0000000340)={&(0x7f0000000180)=@rc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)=""/66, 0x42}, {&(0x7f00000003c0)=""/174, 0xae}, {&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000540)=""/154, 0x9a}], 0x5, &(0x7f0000000000)=""/49, 0x31}, 0x40) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r4, 0x8001}) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r5}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r5) socket$inet_udp(0x2, 0x2, 0x0) 21:07:11 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) [ 668.088719][T19185] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 [ 668.227628][T19188] ubi: mtd0 is already attached to ubi0 21:07:12 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x41, 0x4, 0x9, 0xff, 0x2, 0x4, 0x1, 0x8, 0x4, 0x3f, 0x8, 0x9, 0x5}, 0xe) 21:07:12 executing program 3: r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000500)={0x7, 0x5, 0x4, 0x40, 0x4, {r3, r4/1000+10000}, {0x5, 0x0, 0x9, 0x21, 0x20, 0x8, "259018e0"}, 0x3, 0x2, @userptr=0x9, 0x8, 0x0, 0xffffffffffffffff}) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000380), &(0x7f0000000580)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3001500ff00", @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000003b00)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_LINK={0x8, 0x3, 0xfffffffc}]}}]}, 0x4c}}, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)) r10 = socket$inet_udplite(0x2, 0x2, 0x88) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r11, 0x8250aea6, &(0x7f0000000400)=""/235) [ 668.459874][T19202] siw: device registration error -23 21:07:12 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) [ 668.509681][T19202] siw: device registration error -23 21:07:12 executing program 1: open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@remote, 0x6a}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) 21:07:12 executing program 2: semop(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x3ff, 0x0, [], &(0x7f00000000c0)=0x1f}) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x27, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/49, 0x1) getdents(r1, &(0x7f00000000c0)=""/41, 0x307) getdents(r1, 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r2) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r3, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0xffffffffffffff7d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x24) sendfile(r4, 0xffffffffffffffff, &(0x7f00000002c0)=0x80000001, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x5b6ad32104e938a, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x810c5701, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x0) [ 668.689256][T19188] ubi: mtd0 is already attached to ubi0 [ 668.760371][ T27] audit: type=1800 audit(1583528832.626:2442): pid=19215 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17540 res=0 [ 668.807628][T19215] MINIX-fs: mounting unchecked file system, running fsck is recommended 21:07:12 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 21:07:12 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200, 0x0) syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x9, 0x2441c3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$ASHMEM_GET_SIZE(r10, 0x40046f41, 0x76006e) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r11, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r11, 0x8001}) ioctl$ASHMEM_GET_SIZE(r11, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r12}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r12) 21:07:12 executing program 1: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400012) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="ed624ef6dec4eb69b9f55d9d2b25c41f423c749105c4c6ecd00f24677cfabd5a22c3664f8520508a4248fb0fb3c7874ded8dc5400962775d87c62eb72832740344ed25d30c7c053c7ed8c88c72d2daf60f2e9ff152b4a19f1fc9c3ae31726c7d195cb751d25e75989971b0fe4da6022bfdc79a27280806a76fb5131bd92ab0063fd8d928259a9ac752fc49e0547947f1389e93d27ba258ac46805447ba07"], &(0x7f0000000000)='GPL\x00', 0x5, 0xb5, &(0x7f000000cf3d)=""/181, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r0, r1, 0x0, 0x16, &(0x7f00000005c0)='cpuset.effective_mems\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x400c00) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r7, 0x400454d8, &(0x7f0000001200)=0x80000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000001200)=0x80000000) r9 = openat$cgroup_ro(r8, &(0x7f0000000300)='rdma.current\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r9, 0x800454d2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNGETIFF(r10, 0x800454d2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) r12 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r13, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xfffffffffffffffc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) gettid() r14 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r14, &(0x7f0000000280)={&(0x7f0000000040)=@generic={0x1f, "4bc80c3bd55387360c25a6442784bfcf336523e113dd4a564df785b842c6acdc2e5ac21fc7ea852671c7eae8a490cd6c1b099834277a28f05f151180858a0523ffaba9dc37affc0b1cae5738b3fe19f6799d57f246b257bd727f694ed026ced9d4c6805d94a8a4a8d50b46a1ffb2202360419d00"}, 0x80, 0x0, 0x430}, 0x0) r15 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r16 = socket$kcm(0x11, 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r18 = dup(r17) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r18, 0x13, 0x0, 0x3, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) sendmsg(r14, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r19, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r21 = gettid() perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x8, 0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}, 0x4, 0x0, 0x0, 0x8, 0x0, 0x4, 0x80}, r21, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000a40), 0x16}}, r21, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r22 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r22, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r23 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r24 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r24, 0x1, 0x3e, &(0x7f00000002c0)=r23, 0x4) r25 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r25, 0x18000000000002a0, 0x2b, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f088a81fffffff00004000630677fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0xffffffffffffff50, 0xfffffffffffffe09}, 0xd) r26 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x0) close(r26) ioctl$PERF_EVENT_IOC_SET_FILTER(r26, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r26, 0x89a1, &(0x7f0000000680)='&@[\x00') r27 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20a0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r27) ioctl$PERF_EVENT_IOC_SET_FILTER(r27, 0x89a0, &(0x7f0000000000)='&@[\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r27, 0x89a1, &(0x7f0000000680)='&@[\x00') socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg(r28, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) sendmsg$kcm(r28, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)='l', 0x1}], 0x1}, 0x0) r29 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000001a80)=ANY=[@ANYRES16=r28, @ANYPTR64=&(0x7f0000000a80)=ANY=[@ANYRESOCT, @ANYRES32, @ANYPTR64, @ANYRESOCT=r20, @ANYRES16=r26, @ANYRESHEX=r15, @ANYPTR=&(0x7f0000000700)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYRES32=r27, @ANYRES64=r23, @ANYRES32, @ANYPTR64=&(0x7f0000000800)=ANY=[@ANYRES16=r4, @ANYPTR, @ANYRESHEX=0x0], @ANYBLOB="00d5a8d5e7e1d0789c75ef05dafc3d8c4a2403186499f59fc5ec6565413272c7c25f6a5b8a27f25a56f42400000000cacc0700000000000000b6515b648a99ed88f80233bb592b32726dbc9eb2c992450d45c0c6dbc6cfd01d8f2dd10980629eec8bdc73bfc729c4b4339cf2cab23848a7525cf6fa71a747b1b019ca3ad74a75a45d67a3f569a24e8f227fa368eaa401000d0f56a07f34e6c8a3ae7a5122260b5a9c1e6cda697fb36d2efd01099afc3a8a7a9b546d9a2434f8c8d297ebbe3307cd01493dc87a47f79050445efdfe76e1"], @ANYRESOCT=r23], @ANYPTR64=&(0x7f0000000740)=ANY=[]], @ANYRESOCT=r12, @ANYRES32=r16], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x41000, 0x8, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x80, 0x4}, 0x10}, 0x78) ioctl$sock_kcm_SIOCKCMATTACH(r20, 0x89e0, &(0x7f0000000500)={r16, r29}) 21:07:12 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) [ 669.065104][ T9904] minix_free_inode: bit 1 already cleared 21:07:13 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) 21:07:13 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001, 0x0, 0xffffffffffffffff}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000180)="f0eb781ff70b4e1f88a9945331a8ee36fe540c0e4932f4080df0cee45ca9b6f6891031e5a57b0af504690701e66cbc1918157bb5c6f26eb722abf7a5eb10b7a2649dea485d7884ec26b4a0e0ec8061ff18af9248abc3fc3fcf31f6d7ab92d4e1ed584674250b54bff19280fdd1cd0f6a6a215f1502a8ab22e06c") readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000000)={0xa, {0x4, 0x5, 0x40}}, 0xa) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r4}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r4) 21:07:13 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) syz_open_dev$vcsa(0x0, 0x15, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x20000, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x880002}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x5) inotify_rm_watch(0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r4, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r3, &(0x7f0000000340)="694912", 0x3}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) lstat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r6) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000240)={0x6, 0x7, 0x4, 0x40000, 0x200, {r7, r8/1000+10000}, {0x4, 0x0, 0x94, 0x37, 0x5, 0x94, "fd092631"}, 0x8, 0x4, @fd=r1, 0xcbbc37b, 0x0, r1}) r9 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x5, r9, &(0x7f0000000000)="7283a40398be708111212293cd8971dce1a1ccd9ec86f9895ef722b64de4300e0a6b1de0b0ce7214751600ae2e5cc9eb39be37b4be48e98ba956bcc0047f64544dd8e40341a3c4fc75b212794ee2562a3cc4805dda3fc995a9ee317a1ab924bbf99c220b4a068f462b98d10f6cf2ac7d88867d35c8e22a2f", 0x78, 0x5ba9, 0x0, 0x1}, &(0x7f0000000140)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x401, 0x26) 21:07:13 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) [ 669.651713][T19252] ubi: mtd0 is already attached to ubi0 [ 669.756000][T19243] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.1'. [ 669.764853][T19252] ubi: mtd0 is already attached to ubi0 21:07:13 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @rand_addr=0x9}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, {0x2, 0x4e21, @multicast2}, 0x80, 0x0, 0x0, 0x0, 0xfc9b, &(0x7f0000000180)='lo\x00', 0x7ff, 0x8}) recvmmsg(r0, &(0x7f0000007e00), 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket(0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0100, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r6) getsockname$unix(r6, &(0x7f00000005c0), &(0x7f0000000340)=0x6e) 21:07:13 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000180)={{0x0, 0x5, 0x1, 0xf2, 'syz1\x00', 0x7}, 0x3, 0x3, 0x1f, r2, 0x1, 0x772, 'syz1\x00', &(0x7f0000000000)=['\'$trusted!}-proc]#GPL@\x00'], 0x17, [], [0xb4, 0x1, 0x6, 0x9]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r3, 0x8001}) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r4}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r4) 21:07:13 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 669.860208][T19243] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 21:07:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) fcntl$lock(r0, 0x7, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x0, 0x2}) [ 670.188595][T19270] ubi: mtd0 is already attached to ubi0 21:07:14 executing program 3: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipx\x00') socket$kcm(0x29, 0x2, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) [ 670.426539][T19270] ubi: mtd0 is already attached to ubi0 21:07:14 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttynull\x00', 0x208000, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000440)=0x7) r1 = socket$inet(0x2, 0x1, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, 0x0, 0x0) sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) sendto$inet(r2, &(0x7f0000000140)="f91aa704dd11c24f95866dc7afef2cf6293324bdc531d631b41f5357cdaa8424921c60ac81e067f6fcd53b6d11d1", 0x2e, 0x4, &(0x7f00000001c0)={0x2, 0x4e21, @rand_addr=0xfff}, 0x10) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, 0x0, &(0x7f0000000180)) sendto$inet(r1, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000000c0)="0204", 0x6) r3 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x200, 0x22600) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x7fff}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) getsockname$packet(r4, 0x0, &(0x7f0000000200)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000340), 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x20, 0x463, 0x200, 0x800, 0x9, 0x3, 0x3f, 0x8, r7}, &(0x7f00000003c0)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x20, 0x56c7, 0x200, 0x7, 0x0, 0x0, 0x80000000}, 0x20) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000300)) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) [ 670.496353][T19273] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:07:14 executing program 1: socketpair$unix(0x1, 0x400000000003, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492565, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ppoll(&(0x7f0000001080)=[{r5, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(r3, 0xa, 0x12) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r8) splice(r7, 0x0, r8, 0x0, 0x100000002, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'ip6tnl0\x00', 0x8000}) r12 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, [], 0xb}, 0x7}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_TOL(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4020fba1", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000000000006000000004c00180000000075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000003119b5528907e425521549ea8e27da6951dd845007ac199e4e4f9ae36ea072507450"], 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r9, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xce, 0x681, 0xe71, 0xe0}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000014) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r9, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x8}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000040) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x15) 21:07:14 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 21:07:14 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001, 0x0, 0xffffffffffffffff}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x58, r9, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x18, 0x800000003, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r15, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r15, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) bind(r11, &(0x7f0000000080)=@ll={0x11, 0x0, r15, 0x1, 0x0, 0x6, @dev}, 0x80) getsockname$packet(r11, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {}, {0xfff3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x2c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'netdevsim0\x00'}, @TCA_U32_SEL={0x14}]}}]}, 0x58}}, 0x0) r17 = socket(0x11, 0x800000003, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r19, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r21, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000751dc23d8e008672391e51823799a0837eb904c9cedb383db4eff9d3f961ea48af33fb086dd809e74b05008b925b759fb97b84434f357bf55290ae2254db822b9f4b0a0256facb44521fa875669dd65b11c470252c5c3d9f4636bd897ff950e796e68a63ff88ba4600f241c913de3520493f7aa263989ac3f7d250dba5e5bc918809c9ee4a16e2703708f0dd2edb378300000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r21, @ANYBLOB="00000000ffffffff00000000080001007166710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a010c3"], 0x74}}, 0x0) bind(r17, &(0x7f0000000080)=@ll={0x11, 0x0, r21, 0x1, 0x0, 0x6, @dev}, 0x80) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000008c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000b40)={0x2e0, 0x0, 0x100, 0x7, 0x25dfdbfb, {}, [{{0x8, 0x1, r16}, {0x2c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x800007}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x0, 0x8, 0x9, 0x101}, {0x1, 0x80, 0x0, 0x3}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x5, 0x6, 0x1, 0x3ff}, {0xffff, 0x8, 0x1, 0x3ff}, {0x3ff, 0xff, 0x4, 0x7ff}, {0x8, 0x20, 0xff, 0x7}, {0x3, 0xe, 0x6, 0x2}, {0x9, 0x80, 0x2, 0x4}, {0x4, 0x2, 0x3, 0x4}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x20000800}, 0x44010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r23 = dup(r22) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r23, 0xc028660f, &(0x7f0000000180)={0x0, r3, 0x9, 0xd3, 0xfffffffffffffe00, 0xc7}) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r4) [ 671.078559][T19299] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:07:15 executing program 2: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000a00661b260000000000000cb3ce73000098b5563f44191068e5c90d5eb91fc02cead532837ef04b84a57d0820d0d070dc3fbd50161005e9802d79cef0bbc87e9d205d005c09b048a1581656a770b086c532a9fcde7e77247c46b05301", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}}, 0x0) 21:07:15 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2}}, 0x10) [ 671.198231][T19305] ubi: mtd0 is already attached to ubi0 21:07:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1070c5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x2, 0x0) sendfile(r3, r1, 0x0, 0x10000) 21:07:15 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x110, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0xfd) exit(0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name, &(0x7f0000000100)=0x10, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r2) dup(r0) write(r1, 0x0, 0xffffffffffffff28) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r4) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v3={0x3000000, [{0x6, 0x4}, {0x7, 0x6}], r4}, 0x18, 0x2) [ 671.765470][ T27] audit: type=1804 audit(1583528835.596:2443): pid=19315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/283/file0" dev="sda1" ino=17540 res=1 [ 671.842886][ T27] audit: type=1800 audit(1583528835.596:2444): pid=19315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17540 res=0 [ 671.863738][ T27] audit: type=1804 audit(1583528835.616:2445): pid=19315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/283/file0" dev="sda1" ino=17540 res=1 [ 671.964860][T19320] IPVS: ftp: loaded support on port[0] = 21 [ 671.966348][ T27] audit: type=1800 audit(1583528835.826:2446): pid=19315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17540 res=0 [ 672.127891][ T27] audit: type=1804 audit(1583528835.896:2447): pid=19315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir957950172/syzkaller.DiBFwc/283/file0" dev="sda1" ino=17540 res=1 [ 672.328066][T19313] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:07:16 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000022e5a017658e42f7322faac7ca7ec07914d47cf33f759ef1ba3d537f73d99d7c184a0152ea1a121e767ae7cbde31491e20ec727e3b10b7cdda", @ANYRES32=0x0], 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = syz_open_procfs(r3, &(0x7f0000005d40)='sched\x00') r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}}, 0x1c) sendmmsg(r5, &(0x7f00000002c0), 0x4cc, 0x20007ffc) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x4cc, 0x20007ffc) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r2, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r2}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r2, 0x1}, &(0x7f0000000280)=0x8) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r7, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') 21:07:16 executing program 4 (fault-call:4 fault-nth:0): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 672.558501][T19305] ubi: mtd0 is already attached to ubi0 21:07:16 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) fadvise64(r1, 0x800, 0x0, 0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r3, 0x8001}) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000000)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r4) [ 672.690167][T19331] FAULT_INJECTION: forcing a failure. [ 672.690167][T19331] name failslab, interval 1, probability 0, space 0, times 0 [ 672.782209][T19320] IPVS: ftp: loaded support on port[0] = 21 [ 672.795463][T19336] ubi: mtd0 is already attached to ubi0 [ 672.802642][T19331] CPU: 0 PID: 19331 Comm: syz-executor.4 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 672.812571][T19331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.822644][T19331] Call Trace: [ 672.825989][T19331] dump_stack+0x197/0x210 [ 672.830368][T19331] should_fail.cold+0x5/0xf [ 672.834911][T19331] ? setup_fault_attr+0x1f0/0x1f0 [ 672.839997][T19331] ? ___might_sleep+0x163/0x2c0 [ 672.844887][T19331] __should_failslab+0xb7/0x100 [ 672.849940][T19331] should_failslab+0x9/0x14 [ 672.854468][T19331] kmem_cache_alloc_trace+0x2d3/0x790 [ 672.859928][T19331] ? xas_find_conflict+0x890/0x890 [ 672.865146][T19331] ? rcu_read_lock_held+0x9c/0xb0 [ 672.870282][T19331] cma_alloc_port+0x56/0x1b0 [ 672.874903][T19331] rdma_bind_addr+0x1659/0x1f80 [ 672.879803][T19331] ? cma_ndev_work_handler+0x190/0x190 [ 672.885292][T19331] ? lock_downgrade+0x920/0x920 [ 672.890175][T19331] ? rwlock_bug.part.0+0x90/0x90 [ 672.895157][T19331] rdma_listen+0xa3/0x970 [ 672.899512][T19331] ? _raw_spin_unlock+0x28/0x40 [ 672.904456][T19331] ucma_listen+0x14d/0x1c0 [ 672.908893][T19331] ? ucma_notify+0x190/0x190 [ 672.913509][T19331] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 672.919826][T19331] ? _copy_from_user+0x12c/0x1a0 [ 672.924794][T19331] ucma_write+0x2d7/0x3c0 [ 672.929152][T19331] ? ucma_notify+0x190/0x190 [ 672.933767][T19331] ? ucma_open+0x290/0x290 [ 672.938265][T19331] ? apparmor_file_permission+0x27/0x30 [ 672.944621][T19331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 672.950894][T19331] ? security_file_permission+0x8f/0x380 [ 672.956543][T19331] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 672.961994][T19331] __vfs_write+0x8a/0x110 [ 672.966344][T19331] ? ucma_open+0x290/0x290 [ 672.970784][T19331] vfs_write+0x268/0x5d0 [ 672.975177][T19331] ksys_write+0x220/0x290 [ 672.979532][T19331] ? __ia32_sys_read+0xb0/0xb0 [ 672.984316][T19331] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 672.989798][T19331] ? do_syscall_64+0x26/0x790 [ 672.994523][T19331] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.000612][T19331] ? do_syscall_64+0x26/0x790 [ 673.005322][T19331] __x64_sys_write+0x73/0xb0 [ 673.009948][T19331] do_syscall_64+0xfa/0x790 [ 673.014482][T19331] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.020390][T19331] RIP: 0033:0x45c479 [ 673.024299][T19331] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 673.044469][T19331] RSP: 002b:00007fbe9effec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 673.052905][T19331] RAX: ffffffffffffffda RBX: 00007fbe9efff6d4 RCX: 000000000045c479 [ 673.060903][T19331] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 673.068893][T19331] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 21:07:16 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000022e5a017658e42f7322faac7ca7ec07914d47cf33f759ef1ba3d537f73d99d7c184a0152ea1a121e767ae7cbde31491e20ec727e3b10b7cdda", @ANYRES32=0x0], 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = syz_open_procfs(r3, &(0x7f0000005d40)='sched\x00') r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}}, 0x1c) sendmmsg(r5, &(0x7f00000002c0), 0x4cc, 0x20007ffc) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x4cc, 0x20007ffc) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r2, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r2}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r2, 0x1}, &(0x7f0000000280)=0x8) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r7, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') [ 673.076890][T19331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 673.084882][T19331] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000000 21:07:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='maps\x00') connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c01000076a4ddc03f5f125b73d6dc5439d55205e08ce91e6e1c085afcee28c6b4a1e168323e30e51ffa55339d455ab9e3a9f8b637890e5e5b790c273457588fa346342fbbf62390bc54", @ANYRES16, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='maps\x00') connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) dup2(r6, 0xffffffffffffffff) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bind$inet6(r10, 0x0, 0xfffffffffffffe6f) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000dc) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @rand_addr=0x7ff}, 0x10) r12 = syz_open_procfs(0x0, &(0x7f0000000340)='maps\x00') connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) dup2(r12, r11) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r12, 0xc01064b3, &(0x7f0000000180)) [ 673.214739][T19336] ubi: mtd0 is already attached to ubi0 [ 673.350666][ T9925] tipc: TX() has been purged, node left! 21:07:17 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000022e5a017658e42f7322faac7ca7ec07914d47cf33f759ef1ba3d537f73d99d7c184a0152ea1a121e767ae7cbde31491e20ec727e3b10b7cdda", @ANYRES32=0x0], 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = syz_open_procfs(r3, &(0x7f0000005d40)='sched\x00') r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}}, 0x1c) sendmmsg(r5, &(0x7f00000002c0), 0x4cc, 0x20007ffc) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x4cc, 0x20007ffc) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r2, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r2}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r2, 0x1}, &(0x7f0000000280)=0x8) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r7, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') 21:07:17 executing program 4 (fault-call:4 fault-nth:1): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) 21:07:17 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(r3, &(0x7f0000000740), 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r4}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r4) 21:07:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYPTR64=&(0x7f0000000bc0)=ANY=[@ANYRESDEC], @ANYRES32=0x0, @ANYBLOB="41180000000000003000128008000100677265002400028008000700ac1414000600020007000000050013000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000a00d89b3dc0c0f9f08883cfd808e3f0f72f51396218e3d0340d4a2a8314d863519c6e5a2d206a72871e63ad420a462ca056836d4caaad1e6dcdc0d38f780b3c47d60bb172bbd65767d59f2bb43a064a1e465a6923c119153f9d3015f17d0ac23f6d", @ANYPTR=&(0x7f0000000840)=ANY=[], @ANYBLOB="42e66793997e633c31c1a9ccbe89f55a224af8f20b6d450bd9d5009cde4592ca81389ac6d4e69fbe0894544838b322ea19e6a3ec922fc1a8151e4eda7af8f346ff8095f3d1bd2d7cad4bc90b66dcf44d8e7f778a07d7304cb41df57a1a509f51b62727fb4abb2447c5f1add2940b1f575eef5466b1916131b926ce24e9ef8ff4a4e10cfac10a1a90c340c4114c530423ff993becaf405a194d77c805471d00"/168, @ANYBLOB="5eebc7d3bdf8c914f929fa4efc5e6250b9def488589a394fc84957fe5469464b8ea11054ab53d6282d5d0bba2a29d056389762203f6f1f1b5f5034aa7d127e194aa5421ada98bb100a08c5c172621005c11e274882ee9ab089780da02fc708021a0fb14d6e4f3b12d153ce42322b7929dcb44f52f85fe17b12e445b27211b1763c2d5a845d32454e227516a5aa5173b596b33f44627e40421db61e683627d08628e099119fcf9ba777a6a95d90f62377c33c80d231df242b190b53ccf92e391dd26b76dcbf2de21b"], 0x8}}, 0x0) [ 673.952522][T19356] ubi: mtd0 is already attached to ubi0 [ 674.008549][T19356] ubi: mtd0 is already attached to ubi0 [ 674.176828][T19362] FAULT_INJECTION: forcing a failure. [ 674.176828][T19362] name failslab, interval 1, probability 0, space 0, times 0 [ 674.190319][T19362] CPU: 0 PID: 19362 Comm: syz-executor.4 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 674.200233][T19362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.210425][T19362] Call Trace: [ 674.213743][T19362] dump_stack+0x197/0x210 [ 674.218098][T19362] should_fail.cold+0x5/0xf [ 674.222903][T19362] ? setup_fault_attr+0x1f0/0x1f0 [ 674.227963][T19362] ? stack_trace_save+0x8f/0xc0 [ 674.232852][T19362] ? stack_trace_consume_entry+0x170/0x170 [ 674.238705][T19362] __should_failslab+0xb7/0x100 [ 674.243587][T19362] should_failslab+0x9/0x14 [ 674.248118][T19362] kmem_cache_alloc+0x47/0x710 [ 674.252915][T19362] ? save_stack+0x5c/0x90 [ 674.257382][T19362] ? save_stack+0x23/0x90 [ 674.261737][T19362] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 674.267558][T19362] ? kasan_kmalloc+0x9/0x10 [ 674.272081][T19362] ? kmem_cache_alloc_trace+0x158/0x790 [ 674.277662][T19362] xas_alloc+0x346/0x460 [ 674.281942][T19362] xas_create+0x2cd/0x1060 [ 674.286408][T19362] xas_store+0x9a/0x1a00 [ 674.290785][T19362] ? xas_descend+0x144/0x370 [ 674.295439][T19362] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 674.301822][T19362] ? xas_load+0x67/0x150 [ 674.306110][T19362] __xa_insert+0x17b/0x2a0 [ 674.310615][T19362] ? __xa_cmpxchg+0x2f0/0x2f0 [ 674.315392][T19362] cma_alloc_port+0xb9/0x1b0 [ 674.320037][T19362] rdma_bind_addr+0x1659/0x1f80 [ 674.324946][T19362] ? cma_ndev_work_handler+0x190/0x190 [ 674.330546][T19362] ? lock_downgrade+0x920/0x920 [ 674.335440][T19362] ? rwlock_bug.part.0+0x90/0x90 [ 674.340425][T19362] rdma_listen+0xa3/0x970 [ 674.344798][T19362] ? _raw_spin_unlock+0x28/0x40 [ 674.349694][T19362] ucma_listen+0x14d/0x1c0 [ 674.354145][T19362] ? ucma_notify+0x190/0x190 [ 674.358775][T19362] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 674.365051][T19362] ? _copy_from_user+0x12c/0x1a0 [ 674.370037][T19362] ucma_write+0x2d7/0x3c0 [ 674.374538][T19362] ? ucma_notify+0x190/0x190 [ 674.379166][T19362] ? ucma_open+0x290/0x290 [ 674.383626][T19362] ? apparmor_file_permission+0x27/0x30 [ 674.389213][T19362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 674.395604][T19362] ? security_file_permission+0x8f/0x380 [ 674.401273][T19362] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 674.406870][T19362] __vfs_write+0x8a/0x110 [ 674.411390][T19362] ? ucma_open+0x290/0x290 [ 674.415844][T19362] vfs_write+0x268/0x5d0 [ 674.420138][T19362] ksys_write+0x220/0x290 [ 674.424502][T19362] ? __ia32_sys_read+0xb0/0xb0 [ 674.429306][T19362] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 674.434813][T19362] ? do_syscall_64+0x26/0x790 [ 674.439612][T19362] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 674.445742][T19362] ? do_syscall_64+0x26/0x790 [ 674.450493][T19362] __x64_sys_write+0x73/0xb0 [ 674.455132][T19362] do_syscall_64+0xfa/0x790 [ 674.459977][T19362] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 674.465893][T19362] RIP: 0033:0x45c479 [ 674.469821][T19362] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 674.490407][T19362] RSP: 002b:00007fbe9effec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 674.499731][T19362] RAX: ffffffffffffffda RBX: 00007fbe9efff6d4 RCX: 000000000045c479 [ 674.507735][T19362] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 674.515853][T19362] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 21:07:18 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x501f00, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001, 0x0, 0xffffffffffffffff}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r4}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000000)={0x6}, 0x1) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r5) [ 674.523857][T19362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 674.531957][T19362] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000001 [ 674.560733][T19362] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 21:07:18 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10000, 0x0) pipe(&(0x7f0000000080)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x7, 0x2, 0x82, &(0x7f0000ffc000/0x3000)=nil, 0x9197}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) prlimit64(r1, 0xe, &(0x7f00000001c0)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0xfffffffd, 0x7}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r2, &(0x7f0000005540)=[{{0x0, 0xece400ea, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x24fa, 0x1f4}}], 0x1, 0x100, 0x0) syz_open_procfs(r1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getegid() setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="eae95f9b880ff3aacd0ac929", @ANYRES32=r4, @ANYBLOB="08000400", @ANYBLOB], 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0) getgroups(0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)) r5 = getgid() setresgid(0x0, r5, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) socket$inet6(0xa, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = socket(0x29, 0x0, 0x0) write(r6, &(0x7f0000000400), 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) [ 674.704598][T19366] ubi: mtd0 is already attached to ubi0 21:07:18 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2b4843, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000022e5a017658e42f7322faac7ca7ec07914d47cf33f759ef1ba3d537f73d99d7c184a0152ea1a121e767ae7cbde31491e20ec727e3b10b7cdda", @ANYRES32=0x0], 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x24, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = syz_open_procfs(r3, &(0x7f0000005d40)='sched\x00') r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}}, 0x1c) sendmmsg(r5, &(0x7f00000002c0), 0x4cc, 0x20007ffc) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x4cc, 0x20007ffc) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000002c0)={r2, 0x7}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x1f, 0x0, 0x20f, 0x5, 0x8, 0x8, 0x0, 0x0, r2}, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={r2, 0x1}, &(0x7f0000000280)=0x8) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r7, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000080)='\x00\x00\x00\x01\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000180)='\x00\x00\x03\x00\x00\x00\x00\x05\x00x\x92\x12\xbc\x06^\xbewV\xf3\xb3\xa4e\xfb\xc5}\x9c\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|b\xe2\xff\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c') [ 674.761658][T19366] ubi: mtd0 is already attached to ubi0 21:07:18 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xb8}, 0x8) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:07:18 executing program 4 (fault-call:4 fault-nth:2): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 675.014955][T19375] ubi: mtd0 is already attached to ubi0 21:07:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x560a, &(0x7f0000000540)={0x0, 0x180006, 0x1fe, 0x0, 0x0, "8f31aa11e6ce8779ae8a0c30f061cc9c91f67d"}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) r6 = gettid() perf_event_open(0x0, r6, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, r7, 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) ioctl$KVM_GET_API_VERSION(r9, 0xae00, 0x0) close(r10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r10, 0xc0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x2, 0x0, 0xffffffd9}, &(0x7f00000004c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x4}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, r9, 0x0, 0x2, &(0x7f0000000340)='!\xa0', r11}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r6, r7, 0x0, 0x0, 0x0, r11}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r5, r2, 0x0, 0x1, &(0x7f00000001c0)='\x00', r11}, 0x30) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x28, &(0x7f0000000040)}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x1d5) 21:07:19 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000500), &(0x7f0000000640)=0x40) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x5) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r5 = socket$inet6(0xa, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="800000000002010100000000000000000a00000804000280540001801400018008000100ac1414aa08000200e00000011400018008000100000000400899d7bb26bc8eaced000280050001002f00000006000340000300000c000280050001000600000006000340000300000c00018006000340000200000800084000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x40) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x7e225100, 0x0, 0x0, 0x0, 0x0) r9 = getpgid(0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x20}, r9, 0xffffffffffffffff, r10, 0x0) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x300, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000000008030000000000000000000b00000214000480080001400000000508000140000000ff4c1ce345c168b17ab0fc8c84db447b2dd6dfdd397eb4c4fdbbb3e4cbd5a07412e0c0deecd813b5752e35ad383c4fbc9435124fcb9e74e08740bc8d7a485cb726c9fb736aa88c39445df6f3e1"], 0x28}, 0x1, 0x0, 0x0, 0x2040000}, 0x4000000) ptrace$getregs(0xc, r9, 0xffff, &(0x7f0000000040)=""/75) [ 675.207383][T19375] ubi: mtd0 is already attached to ubi0 [ 675.242571][T19382] FAULT_INJECTION: forcing a failure. [ 675.242571][T19382] name failslab, interval 1, probability 0, space 0, times 0 [ 675.322536][T19382] CPU: 1 PID: 19382 Comm: syz-executor.4 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 675.332483][T19382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.342554][T19382] Call Trace: [ 675.345882][T19382] dump_stack+0x197/0x210 [ 675.350253][T19382] should_fail.cold+0x5/0xf [ 675.354796][T19382] ? setup_fault_attr+0x1f0/0x1f0 [ 675.359858][T19382] ? ___might_sleep+0x163/0x2c0 [ 675.364744][T19382] __should_failslab+0xb7/0x100 [ 675.369624][T19382] should_failslab+0x9/0x14 [ 675.374158][T19382] kmem_cache_alloc_trace+0x2d3/0x790 [ 675.379905][T19382] ? lock_downgrade+0x920/0x920 [ 675.384781][T19382] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 675.390612][T19382] ? cma_comp_exch+0xac/0xd0 [ 675.395221][T19382] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 675.401052][T19382] ? cma_alloc_port+0x1b0/0x1b0 [ 675.405934][T19382] __rdma_create_id+0x5e/0x870 [ 675.410729][T19382] cma_listen_on_dev+0x1cd/0x730 [ 675.415709][T19382] rdma_listen+0x772/0x970 21:07:19 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="73656375726974790000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000c2d45e2028810c3a7ece98546528e9bae13d98dc9202abfdf5d8aa6e6416cc2edb968d68edf16361cd46afbfff9b8a10558c531e3727d541517f9265723831f14b479baeaa231c37f19b3102e09f8b53abe33cc28110e7a736e759eb492457c0913002224186fa67389b6fb03d7c768da80655454b721893d34c7b5f6714deeb9828daeec311cf3272a7e036d81ef5f1cf413bd9e899bfaeacfd278dd43f99"], 0x68) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd46a, 0x0, @perf_config_ext={0x3ff, 0x17}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0x75, 0x8, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r3, 0x8001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000005c0)=0x8) r7 = dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0xfffffffefffffc01) ioctl$DRM_IOCTL_AGP_ENABLE(r9, 0x40086432, &(0x7f0000000500)=0x176) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000340)={0x980000, 0x7fffffff, 0xd4d, r3, 0x0, &(0x7f00000002c0)={0x9909e2, 0xffff9cba, [], @p_u16=&(0x7f0000000280)=0x6}}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000003c0)={0x0, 0xff11, 0x10, 0x8, 0x9e3}, &(0x7f0000000400)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, &(0x7f0000000600)=ANY=[@ANYRES32=r11, @ANYBLOB="57000000cdb69ef614000ef17a2fb0a2513f9a4309b7974bd820316758065f956fd9ca82ab276543180b58e3206df535ec53fc2d8ae85c06ffc341ebec0dcca7f70cc51610b01e20bf3397bda779dfb367548a40bbed98f2c3a504bc496b96bb8d723fe2a2e0ba402bcb716113b79cdfff44"], &(0x7f00000004c0)=0x5f) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self\x00', 0x800, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r12}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r12) accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x1c, 0x0) [ 675.420146][T19382] ? _raw_spin_unlock+0x28/0x40 [ 675.420900][T19390] IPVS: ftp: loaded support on port[0] = 21 [ 675.425022][T19382] ucma_listen+0x14d/0x1c0 [ 675.425039][T19382] ? ucma_notify+0x190/0x190 [ 675.425066][T19382] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 675.446218][T19382] ? _copy_from_user+0x12c/0x1a0 [ 675.451195][T19382] ucma_write+0x2d7/0x3c0 [ 675.456781][T19382] ? ucma_notify+0x190/0x190 [ 675.456800][T19382] ? ucma_open+0x290/0x290 [ 675.456818][T19382] ? apparmor_file_permission+0x27/0x30 [ 675.456840][T19382] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 675.456859][T19382] ? security_file_permission+0x8f/0x380 [ 675.456873][T19382] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 675.456895][T19382] __vfs_write+0x8a/0x110 [ 675.456909][T19382] ? ucma_open+0x290/0x290 [ 675.456928][T19382] vfs_write+0x268/0x5d0 [ 675.456951][T19382] ksys_write+0x220/0x290 [ 675.456971][T19382] ? __ia32_sys_read+0xb0/0xb0 21:07:19 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x7, 0x300) pipe(0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000080)={0x2, 0x97, 0x7, 0x5, 0xb, "0273115a7239308600e95c4e59ca54df91a320"}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) getpid() ftruncate(0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) fstatfs(r2, &(0x7f00000004c0)=""/156) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="b2f33f8c4a1130c4ae055dae3330b8c8e6517f8818729183d38ad595f149bf5cd588ef61bc3ad072aed0d7847ca756b6b6c03d4c0e7117bb778fad29a29cd4c4789433c2b794d08047484abc83a07d3313bec48c9e25546ff58bf0008ba12fac418f76f01f4dddfd503e47ebb45d13b498fd7470986fa057cc119e37b20f167bceebc83141488afb2ddaf12bfd02844e0541e8da56f71f0d25a76a7bf3694ab58dfdc761a88453f1bd0417de496c7f3416dee6b1f8a6e0833b88e2671fb3780860c9ece2792988483ac649f3a817112637dd3db995a8c3dca9842fec57e65dc61ea379738015e1aba3ac707c616c4f42bf702b1db589957342692c9b2f88bb2a") setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x12100, 0x0) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac6188d1c739d953059bcecc7a95425a3a07e758054ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xffffffffffffffeb, 0x200003e8, 0x0, 0x27) [ 675.456989][T19382] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 675.457006][T19382] ? do_syscall_64+0x26/0x790 [ 675.457023][T19382] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 21:07:19 executing program 4 (fault-call:4 fault-nth:3): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 675.457038][T19382] ? do_syscall_64+0x26/0x790 [ 675.457063][T19382] __x64_sys_write+0x73/0xb0 [ 675.457084][T19382] do_syscall_64+0xfa/0x790 [ 675.457108][T19382] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.457120][T19382] RIP: 0033:0x45c479 21:07:19 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x4, &(0x7f00000000c0)=0x4) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r3, r4, &(0x7f0000000240)=0x202, 0x4000000000dc) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000040", @ANYRES16=r5, @ANYBLOB="050c27bd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x140}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffff8}]}, 0x2c}}, 0x20004800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c562c84ed7a80ffe0060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) [ 675.457137][T19382] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 21:07:19 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000810}, 0x8000) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) 21:07:19 executing program 4 (fault-call:4 fault-nth:4): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 675.457146][T19382] RSP: 002b:00007fbe9effec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 675.457162][T19382] RAX: ffffffffffffffda RBX: 00007fbe9efff6d4 RCX: 000000000045c479 [ 675.457171][T19382] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 21:07:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) getpid() r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x28024011) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = semget(0x0, 0x2, 0x0) semctl$GETVAL(r3, 0x2, 0xc, &(0x7f00000001c0)=""/205) [ 675.457180][T19382] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 675.457189][T19382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 21:07:20 executing program 4 (fault-call:4 fault-nth:5): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 675.457198][T19382] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000002 [ 675.671741][T19396] ubi: mtd0 is already attached to ubi0 [ 675.700106][T19396] ubi: mtd0 is already attached to ubi0 [ 675.998618][T19408] FAULT_INJECTION: forcing a failure. [ 675.998618][T19408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 675.998641][T19408] CPU: 0 PID: 19408 Comm: syz-executor.4 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 675.998651][T19408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 21:07:20 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video0\x00', 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='loginuid\x00') r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x201, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000940)=[@in6={0xa, 0x4e24, 0x3, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0xbd, @remote, 0x400}, @in6={0xa, 0x4e20, 0x2, @local, 0xffff}, @in6={0xa, 0x4e20, 0x8000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}], 0x90) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000031aac586a9644e6d71e1c3eb319494000001b00000005000000e00300000000000000000000a8010000a0020000a00200004803000048030000", @ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000f77e19ed8cc48eb70000000000000000000000002000000000000000000000000000d908e3708218cca0abc4aba0e2d1c15454c3cf39be7a3d3936cf49a499f9406b36c4757ea1a3785a8f84e69eb56894281e74ef4c8020b3f88b8a08f993b393a43b1cc6ae13640f36521cc648692a0605332b1d729dfb372a00"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d0000000000000000000000000000000000000000000280069636d700000000000000000000000000000000000000000000000000000041c2a01000000003800444e41540000000000000000000000000000000000000000000000000000010000002c000000ac1414aaac1414bb06004e20000000007f000001ac1414bbffffff00ff0000006e7230000000000000000000000000006873723000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e00011000000000a000d800000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000200080e01000000000000000000000038005245444952454354000000000000000000000000000000000000000000000100000010000000ac1414aaac1414bb4e20006800000000e0000002ac1414aaffffffffffffff006e72300000000000000000000000000069705f7674693000000000000000000000000000000000000000000000000000ff0000000000000000000000000000001600020c00000000c000f800000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000000000000000000000020000000200000038004d41535155455241444500000000000000000000000000000000000000000100000005000000ac1414bbac1414aa4e21070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a800000000000000000000000000000000000000000038005245444952454354000000000000000000000000000000000000000000000100000007000000e0000002ac1414aa4e223f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x440) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r6) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x101c00, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40)='nl80211\x00') getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @multicast2, @empty}, &(0x7f0000000b00)=0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x84, r10, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8c3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_SCAN_SSIDS={0x58, 0x2d, 0x0, 0x1, [{0xa, 0x0, [0x1f, 0x6, 0x7, 0x1b, 0x17, 0x14]}, {0xb, 0x0, [0x19, 0x1e, 0xc, 0x11, 0x1a, 0x1f, 0x11]}, {0x5, 0x0, [0x6]}, {0x8, 0x0, [0x1e, 0x5, 0x20, 0x1c]}, {0x7, 0x0, [0x16, 0x0, 0x1d]}, {0x7, 0x0, [0x20, 0xc, 0x14]}, {0xa, 0x0, [0x1c, 0x20, 0x6, 0xf, 0x16, 0x10]}, {0x7, 0x0, [0x2, 0xf, 0x1b]}, {0x6, 0x0, [0x12, 0x1c]}]}]}, 0x84}}, 0x24000000) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$snddsp(r8, &(0x7f0000000780)="223b83508e11ee90a7e0e0efe3419d54dec9945dce17443df9b3ac66a6177eb66bc7badc04db70b223df8d754780327dae0bd7ceadff4b679de491fbeef25e31e2430095bf40154fa4bfd2cf399f8268d0fd7e427eae9ede87ee452216693ff0a0c3adc6391e16163ebaf142019402788c4361eb0408019f92d099b12a378dbae029425d5f7b18ed0da2489829e1b5a5ca19814231e59442590a20f9761887abb7bea0d7e1283c2d3d77548912e1a654bf02bc53356614674a84c65f7cad655303392de7f3f3cce9f7176ac9cb7364e6e878afd1f479b6b576c2d97d51afec0e128878d5251b318bd9c5", 0xea) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$USBDEVFS_GET_SPEED(r13, 0x551f) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x2}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r14+30000000}, 0x0) 21:07:20 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x75, 0x7, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x5, 0x2, 0x1, 0x2d, 0x3f, 0x6, "4f4638f0"}, 0x10001, 0x3, @fd=r2, 0x8001}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000180)=0x14) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)=r6) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000300)=r3) [ 675.998656][T19408] Call Trace: 21:07:20 executing program 4 (fault-call:4 fault-nth:6): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x2}}, 0x10) [ 675.998679][T19408] dump_stack+0x197/0x210 [ 675.998707][T19408] should_fail.cold+0x5/0xf [ 675.998730][T19408] ? setup_fault_attr+0x1f0/0x1f0 [ 675.998748][T19408] ? __kasan_check_read+0x11/0x20 [ 675.998763][T19408] ? __lock_acquire+0x1af3/0x6320 [ 675.998794][T19408] should_fail_alloc_page+0x50/0x60 [ 675.998810][T19408] __alloc_pages_nodemask+0x1a1/0x910 [ 675.998828][T19408] ? fs_reclaim_release+0xf/0x30 [ 675.998847][T19408] ? __alloc_pages_slowpath+0x2900/0x2900 [ 675.998863][T19408] ? fs_reclaim_release+0xf/0x30 [ 675.998906][T19408] cache_grow_begin+0x90/0xc60 [ 675.998926][T19408] ? trace_hardirqs_off+0x62/0x240 [ 675.998951][T19408] kmem_cache_alloc_trace+0x6b3/0x790 [ 675.998966][T19408] ? lock_downgrade+0x920/0x920 [ 675.998995][T19408] ? cma_alloc_port+0x1b0/0x1b0 [ 675.999013][T19408] __rdma_create_id+0x5e/0x870 [ 675.999040][T19408] cma_listen_on_dev+0x1cd/0x730 [ 675.999066][T19408] rdma_listen+0x772/0x970 [ 675.999080][T19408] ? _raw_spin_unlock+0x28/0x40 [ 675.999104][T19408] ucma_listen+0x14d/0x1c0 [ 675.999123][T19408] ? ucma_notify+0x190/0x190 [ 675.999146][T19408] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 675.999163][T19408] ? _copy_from_user+0x12c/0x1a0 [ 675.999187][T19408] ucma_write+0x2d7/0x3c0 [ 675.999205][T19408] ? ucma_notify+0x190/0x190 [ 675.999223][T19408] ? ucma_open+0x290/0x290 [ 675.999241][T19408] ? apparmor_file_permission+0x27/0x30 [ 675.999265][T19408] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 675.999283][T19408] ? security_file_permission+0x8f/0x380 [ 675.999299][T19408] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 675.999319][T19408] __vfs_write+0x8a/0x110 [ 675.999333][T19408] ? ucma_open+0x290/0x290 [ 675.999353][T19408] vfs_write+0x268/0x5d0 [ 675.999375][T19408] ksys_write+0x220/0x290 [ 675.999395][T19408] ? __ia32_sys_read+0xb0/0xb0 [ 675.999412][T19408] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 675.999428][T19408] ? do_syscall_64+0x26/0x790 [ 675.999442][T19408] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.999457][T19408] ? do_syscall_64+0x26/0x790 [ 675.999487][T19408] __x64_sys_write+0x73/0xb0 [ 675.999508][T19408] do_syscall_64+0xfa/0x790 [ 675.999532][T19408] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.999544][T19408] RIP: 0033:0x45c479 [ 675.999559][T19408] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 675.999567][T19408] RSP: 002b:00007fbe9effec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 675.999582][T19408] RAX: ffffffffffffffda RBX: 00007fbe9efff6d4 RCX: 000000000045c479 [ 675.999590][T19408] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 675.999599][T19408] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 675.999607][T19408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 675.999616][T19408] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000003 [ 676.004209][T19408] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 676.279869][T19395] IPVS: ftp: loaded support on port[0] = 21 [ 676.304384][T19418] ubi: mtd0 is already attached to ubi0 [ 676.363384][T19420] FAULT_INJECTION: forcing a failure. [ 676.363384][T19420] name failslab, interval 1, probability 0, space 0, times 0 [ 676.363414][T19420] CPU: 1 PID: 19420 Comm: syz-executor.4 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 676.363425][T19420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.363430][T19420] Call Trace: [ 676.363453][T19420] dump_stack+0x197/0x210 [ 676.363481][T19420] should_fail.cold+0x5/0xf [ 676.363504][T19420] ? setup_fault_attr+0x1f0/0x1f0 [ 676.363527][T19420] ? ___might_sleep+0x163/0x2c0 [ 676.363552][T19420] __should_failslab+0xb7/0x100 [ 676.363571][T19420] should_failslab+0x9/0x14 [ 676.363590][T19420] kmem_cache_alloc_trace+0x2d3/0x790 [ 676.363605][T19420] ? lock_downgrade+0x920/0x920 [ 676.363624][T19420] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 676.363639][T19420] ? cma_comp_exch+0xac/0xd0 [ 676.363653][T19420] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 676.363676][T19420] ? cma_alloc_port+0x1b0/0x1b0 [ 676.363694][T19420] __rdma_create_id+0x5e/0x870 [ 676.363719][T19420] cma_listen_on_dev+0x1cd/0x730 [ 676.363741][T19420] rdma_listen+0x772/0x970 [ 676.363754][T19420] ? _raw_spin_unlock+0x28/0x40 [ 676.363778][T19420] ucma_listen+0x14d/0x1c0 [ 676.363797][T19420] ? ucma_notify+0x190/0x190 [ 676.363821][T19420] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 676.363838][T19420] ? _copy_from_user+0x12c/0x1a0 [ 676.363863][T19420] ucma_write+0x2d7/0x3c0 [ 676.363881][T19420] ? ucma_notify+0x190/0x190 [ 676.363899][T19420] ? ucma_open+0x290/0x290 [ 676.363917][T19420] ? apparmor_file_permission+0x27/0x30 [ 676.363936][T19420] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.363953][T19420] ? security_file_permission+0x8f/0x380 [ 676.363968][T19420] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 676.363991][T19420] __vfs_write+0x8a/0x110 [ 676.364007][T19420] ? ucma_open+0x290/0x290 [ 676.364027][T19420] vfs_write+0x268/0x5d0 [ 676.364053][T19420] ksys_write+0x220/0x290 [ 676.364074][T19420] ? __ia32_sys_read+0xb0/0xb0 [ 676.364093][T19420] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 676.364110][T19420] ? do_syscall_64+0x26/0x790 [ 676.364124][T19420] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.364145][T19420] ? do_syscall_64+0x26/0x790 [ 676.364173][T19420] __x64_sys_write+0x73/0xb0 [ 676.364194][T19420] do_syscall_64+0xfa/0x790 [ 676.364219][T19420] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.364233][T19420] RIP: 0033:0x45c479 [ 676.364250][T19420] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 676.364258][T19420] RSP: 002b:00007fbe9effec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 676.364274][T19420] RAX: ffffffffffffffda RBX: 00007fbe9efff6d4 RCX: 000000000045c479 [ 676.364284][T19420] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 676.364293][T19420] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 676.364302][T19420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 676.364311][T19420] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000004 [ 676.456366][T19418] ubi: mtd0 is already attached to ubi0 [ 676.864691][T19432] FAULT_INJECTION: forcing a failure. [ 676.864691][T19432] name failslab, interval 1, probability 0, space 0, times 0 [ 676.864715][T19432] CPU: 1 PID: 19432 Comm: syz-executor.4 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 676.864725][T19432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.864731][T19432] Call Trace: [ 676.864755][T19432] dump_stack+0x197/0x210 [ 676.864785][T19432] should_fail.cold+0x5/0xf [ 676.864810][T19432] ? setup_fault_attr+0x1f0/0x1f0 [ 676.864836][T19432] ? ___might_sleep+0x163/0x2c0 [ 676.864863][T19432] __should_failslab+0xb7/0x100 [ 676.864882][T19432] should_failslab+0x9/0x14 [ 676.864900][T19432] kmem_cache_alloc_trace+0x2d3/0x790 [ 676.864924][T19432] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 676.864958][T19432] alloc_work_entries+0xaf/0x240 [ 676.864982][T19432] iw_cm_listen+0x47/0x1f0 [ 676.865008][T19432] rdma_listen+0x613/0x970 [ 676.865035][T19432] cma_listen_on_dev+0x58b/0x730 [ 676.865063][T19432] rdma_listen+0x772/0x970 [ 676.865077][T19432] ? _raw_spin_unlock+0x28/0x40 [ 676.865098][T19432] ucma_listen+0x14d/0x1c0 [ 676.865114][T19432] ? ucma_notify+0x190/0x190 [ 676.865134][T19432] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 676.865150][T19432] ? _copy_from_user+0x12c/0x1a0 [ 676.865176][T19432] ucma_write+0x2d7/0x3c0 [ 676.865195][T19432] ? ucma_notify+0x190/0x190 [ 676.865212][T19432] ? ucma_open+0x290/0x290 [ 676.865233][T19432] ? apparmor_file_permission+0x27/0x30 [ 676.865251][T19432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 676.865268][T19432] ? security_file_permission+0x8f/0x380 [ 676.865284][T19432] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 676.865307][T19432] __vfs_write+0x8a/0x110 [ 676.865322][T19432] ? ucma_open+0x290/0x290 [ 676.865343][T19432] vfs_write+0x268/0x5d0 [ 676.865368][T19432] ksys_write+0x220/0x290 [ 676.865388][T19432] ? __ia32_sys_read+0xb0/0xb0 [ 676.865406][T19432] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 676.865421][T19432] ? do_syscall_64+0x26/0x790 [ 676.865437][T19432] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.865452][T19432] ? do_syscall_64+0x26/0x790 [ 676.865478][T19432] __x64_sys_write+0x73/0xb0 [ 676.865499][T19432] do_syscall_64+0xfa/0x790 [ 676.865522][T19432] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.865535][T19432] RIP: 0033:0x45c479 [ 676.865551][T19432] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 676.865560][T19432] RSP: 002b:00007fbe9effec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 676.865576][T19432] RAX: ffffffffffffffda RBX: 00007fbe9efff6d4 RCX: 000000000045c479 [ 676.865593][T19432] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 676.865603][T19432] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 676.865613][T19432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 676.865622][T19432] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000005 [ 676.865775][T19432] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -12 [ 677.269917][T19443] ubi: mtd0 is already attached to ubi0 [ 677.275730][T19445] FAULT_INJECTION: forcing a failure. [ 677.275730][T19445] name failslab, interval 1, probability 0, space 0, times 0 [ 677.275755][T19445] CPU: 0 PID: 19445 Comm: syz-executor.4 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 677.275765][T19445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.275776][T19445] Call Trace: [ 677.275800][T19445] dump_stack+0x197/0x210 [ 677.275830][T19445] should_fail.cold+0x5/0xf [ 677.275854][T19445] ? setup_fault_attr+0x1f0/0x1f0 [ 677.275880][T19445] ? ___might_sleep+0x163/0x2c0 [ 677.275908][T19445] __should_failslab+0xb7/0x100 [ 677.275927][T19445] should_failslab+0x9/0x14 [ 677.275945][T19445] kmem_cache_alloc_trace+0x2d3/0x790 [ 677.275962][T19445] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 677.275986][T19445] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 677.276073][T19445] ? put_work+0x126/0x180 [ 677.276105][T19445] alloc_work_entries+0xaf/0x240 [ 677.276129][T19445] iw_cm_listen+0x47/0x1f0 [ 677.276156][T19445] rdma_listen+0x613/0x970 [ 677.276185][T19445] cma_listen_on_dev+0x58b/0x730 [ 677.276214][T19445] rdma_listen+0x772/0x970 [ 677.276229][T19445] ? _raw_spin_unlock+0x28/0x40 [ 677.276263][T19445] ucma_listen+0x14d/0x1c0 [ 677.276282][T19445] ? ucma_notify+0x190/0x190 [ 677.276306][T19445] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 677.276325][T19445] ? _copy_from_user+0x12c/0x1a0 [ 677.276351][T19445] ucma_write+0x2d7/0x3c0 [ 677.276372][T19445] ? ucma_notify+0x190/0x190 [ 677.276391][T19445] ? ucma_open+0x290/0x290 [ 677.276410][T19445] ? apparmor_file_permission+0x27/0x30 [ 677.276428][T19445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.276445][T19445] ? security_file_permission+0x8f/0x380 [ 677.276461][T19445] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 677.276485][T19445] __vfs_write+0x8a/0x110 [ 677.276500][T19445] ? ucma_open+0x290/0x290 [ 677.276522][T19445] vfs_write+0x268/0x5d0 [ 677.276548][T19445] ksys_write+0x220/0x290 [ 677.276569][T19445] ? __ia32_sys_read+0xb0/0xb0 [ 677.276588][T19445] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 677.276613][T19445] ? do_syscall_64+0x26/0x790 [ 677.276629][T19445] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.276646][T19445] ? do_syscall_64+0x26/0x790 [ 677.276674][T19445] __x64_sys_write+0x73/0xb0 [ 677.276697][T19445] do_syscall_64+0xfa/0x790 [ 677.276723][T19445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.276736][T19445] RIP: 0033:0x45c479 [ 677.276754][T19445] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 677.276764][T19445] RSP: 002b:00007fbe9effec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 677.276781][T19445] RAX: ffffffffffffffda RBX: 00007fbe9efff6d4 RCX: 000000000045c479 [ 677.276789][T19445] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 677.276799][T19445] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 677.276808][T19445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 677.276817][T19445] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000006 [ 677.283945][T19445] ================================================================== [ 677.284137][T19445] BUG: KASAN: use-after-free in iwcm_deref_id+0x1d3/0x1e0 [ 677.284152][T19445] Read of size 8 at addr ffff88808f2f6178 by task syz-executor.4/19445 [ 677.284156][T19445] [ 677.284174][T19445] CPU: 0 PID: 19445 Comm: syz-executor.4 Not tainted 5.6.0-rc3-next-20200225-syzkaller #0 [ 677.284183][T19445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.284189][T19445] Call Trace: [ 677.284209][T19445] dump_stack+0x197/0x210 [ 677.284229][T19445] ? iwcm_deref_id+0x1d3/0x1e0 [ 677.284262][T19445] print_address_description.constprop.0.cold+0xd4/0x30b [ 677.284280][T19445] ? iwcm_deref_id+0x1d3/0x1e0 [ 677.284298][T19445] ? iwcm_deref_id+0x1d3/0x1e0 [ 677.284317][T19445] __kasan_report.cold+0x1b/0x32 [ 677.284338][T19445] ? destroy_cm_id+0x160/0x540 [ 677.284352][T19445] ? iwcm_deref_id+0x1d3/0x1e0 [ 677.284376][T19445] kasan_report+0x12/0x20 [ 677.284392][T19445] __asan_report_load8_noabort+0x14/0x20 [ 677.284408][T19445] iwcm_deref_id+0x1d3/0x1e0 [ 677.284431][T19445] destroy_cm_id+0x27c/0x540 [ 677.284451][T19445] ? rem_ref+0x20/0x20 [ 677.284472][T19445] ? alloc_work_entries+0x12a/0x240 [ 677.284498][T19445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.284523][T19445] iw_destroy_cm_id+0x16/0x20 [ 677.284543][T19445] rdma_listen+0x656/0x970 [ 677.284567][T19445] cma_listen_on_dev+0x58b/0x730 [ 677.284592][T19445] rdma_listen+0x772/0x970 [ 677.284607][T19445] ? _raw_spin_unlock+0x28/0x40 [ 677.284629][T19445] ucma_listen+0x14d/0x1c0 [ 677.284646][T19445] ? ucma_notify+0x190/0x190 [ 677.284667][T19445] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 677.284684][T19445] ? _copy_from_user+0x12c/0x1a0 [ 677.284705][T19445] ucma_write+0x2d7/0x3c0 [ 677.284723][T19445] ? ucma_notify+0x190/0x190 [ 677.284741][T19445] ? ucma_open+0x290/0x290 [ 677.284759][T19445] ? apparmor_file_permission+0x27/0x30 [ 677.284777][T19445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.284793][T19445] ? security_file_permission+0x8f/0x380 [ 677.284807][T19445] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 677.284830][T19445] __vfs_write+0x8a/0x110 [ 677.284844][T19445] ? ucma_open+0x290/0x290 [ 677.284865][T19445] vfs_write+0x268/0x5d0 [ 677.284892][T19445] ksys_write+0x220/0x290 [ 677.284913][T19445] ? __ia32_sys_read+0xb0/0xb0 [ 677.284933][T19445] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 677.284950][T19445] ? do_syscall_64+0x26/0x790 [ 677.284965][T19445] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.284980][T19445] ? do_syscall_64+0x26/0x790 [ 677.285005][T19445] __x64_sys_write+0x73/0xb0 [ 677.285027][T19445] do_syscall_64+0xfa/0x790 [ 677.285048][T19445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.285058][T19445] RIP: 0033:0x45c479 [ 677.285074][T19445] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 677.285082][T19445] RSP: 002b:00007fbe9effec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 677.285104][T19445] RAX: ffffffffffffffda RBX: 00007fbe9efff6d4 RCX: 000000000045c479 [ 677.285113][T19445] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 677.285122][T19445] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 677.285130][T19445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 677.285137][T19445] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000006 [ 677.285173][T19445] [ 677.285184][T19445] Allocated by task 19445: [ 677.285201][T19445] save_stack+0x23/0x90 [ 677.285217][T19445] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 677.285233][T19445] kasan_kmalloc+0x9/0x10 [ 677.285248][T19445] kmem_cache_alloc_trace+0x158/0x790 [ 677.285263][T19445] alloc_work_entries+0xaf/0x240 [ 677.285277][T19445] iw_cm_listen+0x47/0x1f0 [ 677.285294][T19445] rdma_listen+0x613/0x970 [ 677.285310][T19445] cma_listen_on_dev+0x58b/0x730 [ 677.285326][T19445] rdma_listen+0x772/0x970 [ 677.285344][T19445] ucma_listen+0x14d/0x1c0 [ 677.285360][T19445] ucma_write+0x2d7/0x3c0 [ 677.285374][T19445] __vfs_write+0x8a/0x110 [ 677.285389][T19445] vfs_write+0x268/0x5d0 [ 677.285403][T19445] ksys_write+0x220/0x290 [ 677.285418][T19445] __x64_sys_write+0x73/0xb0 [ 677.285434][T19445] do_syscall_64+0xfa/0x790 [ 677.285451][T19445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.285459][T19445] [ 677.285471][T19445] Freed by task 19445: [ 677.285486][T19445] save_stack+0x23/0x90 [ 677.285503][T19445] __kasan_slab_free+0x102/0x150 [ 677.285518][T19445] kasan_slab_free+0xe/0x10 [ 677.285532][T19445] kfree+0x10a/0x2c0 [ 677.285546][T19445] alloc_work_entries+0x1e6/0x240 [ 677.285559][T19445] iw_cm_listen+0x47/0x1f0 [ 677.285574][T19445] rdma_listen+0x613/0x970 [ 677.285589][T19445] cma_listen_on_dev+0x58b/0x730 [ 677.285611][T19445] rdma_listen+0x772/0x970 [ 677.285627][T19445] ucma_listen+0x14d/0x1c0 [ 677.285642][T19445] ucma_write+0x2d7/0x3c0 [ 677.285655][T19445] __vfs_write+0x8a/0x110 [ 677.285668][T19445] vfs_write+0x268/0x5d0 [ 677.285682][T19445] ksys_write+0x220/0x290 [ 677.285696][T19445] __x64_sys_write+0x73/0xb0 [ 677.285711][T19445] do_syscall_64+0xfa/0x790 [ 677.285726][T19445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.285735][T19445] [ 677.285749][T19445] The buggy address belongs to the object at ffff88808f2f6000 [ 677.285749][T19445] which belongs to the cache kmalloc-512 of size 512 [ 677.285764][T19445] The buggy address is located 376 bytes inside of [ 677.285764][T19445] 512-byte region [ffff88808f2f6000, ffff88808f2f6200) [ 677.285773][T19445] The buggy address belongs to the page: [ 677.285788][T19445] page:ffffea00023cbd80 refcount:1 mapcount:0 mapping:00000000ee1749d2 index:0x0 [ 677.285802][T19445] flags: 0xfffe0000000200(slab) [ 677.285824][T19445] raw: 00fffe0000000200 ffffea0002a3b7c8 ffffea0002774348 ffff8880aa400a80 [ 677.285846][T19445] raw: 0000000000000000 ffff88808f2f6000 0000000100000004 0000000000000000 [ 677.285856][T19445] page dumped because: kasan: bad access detected [ 677.285864][T19445] [ 677.285873][T19445] Memory state around the buggy address: [ 677.285886][T19445] ffff88808f2f6000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 677.285898][T19445] ffff88808f2f6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 677.285911][T19445] >ffff88808f2f6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 677.285921][T19445] ^ [ 677.285934][T19445] ffff88808f2f6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 677.285946][T19445] ffff88808f2f6200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 677.285955][T19445] ================================================================== [ 677.285965][T19445] Disabling lock debugging due to kernel taint [ 677.296146][T19445] Kernel panic - not syncing: panic_on_warn set ... [ 677.296169][T19445] CPU: 0 PID: 19445 Comm: syz-executor.4 Tainted: G B 5.6.0-rc3-next-20200225-syzkaller #0 [ 677.296178][T19445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.296182][T19445] Call Trace: [ 677.296206][T19445] dump_stack+0x197/0x210 [ 677.296320][T19445] panic+0x2e3/0x75c [ 677.296337][T19445] ? add_taint.cold+0x16/0x16 [ 677.296358][T19445] ? iwcm_deref_id+0x1d3/0x1e0 [ 677.296373][T19445] ? preempt_schedule+0x4b/0x60 [ 677.296389][T19445] ? ___preempt_schedule+0x16/0x18 [ 677.296401][T19445] ? trace_hardirqs_on+0x5e/0x240 [ 677.296418][T19445] ? iwcm_deref_id+0x1d3/0x1e0 [ 677.296434][T19445] end_report+0x47/0x4f [ 677.296446][T19445] ? iwcm_deref_id+0x1d3/0x1e0 [ 677.296458][T19445] __kasan_report.cold+0xe/0x32 [ 677.296472][T19445] ? destroy_cm_id+0x160/0x540 [ 677.296483][T19445] ? iwcm_deref_id+0x1d3/0x1e0 [ 677.296500][T19445] kasan_report+0x12/0x20 [ 677.296514][T19445] __asan_report_load8_noabort+0x14/0x20 [ 677.296530][T19445] iwcm_deref_id+0x1d3/0x1e0 [ 677.296548][T19445] destroy_cm_id+0x27c/0x540 [ 677.296565][T19445] ? rem_ref+0x20/0x20 [ 677.296581][T19445] ? alloc_work_entries+0x12a/0x240 [ 677.296600][T19445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.296615][T19445] iw_destroy_cm_id+0x16/0x20 [ 677.296627][T19445] rdma_listen+0x656/0x970 [ 677.296644][T19445] cma_listen_on_dev+0x58b/0x730 [ 677.296660][T19445] rdma_listen+0x772/0x970 [ 677.296673][T19445] ? _raw_spin_unlock+0x28/0x40 [ 677.296690][T19445] ucma_listen+0x14d/0x1c0 [ 677.296707][T19445] ? ucma_notify+0x190/0x190 [ 677.296726][T19445] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 677.296742][T19445] ? _copy_from_user+0x12c/0x1a0 [ 677.296761][T19445] ucma_write+0x2d7/0x3c0 [ 677.296777][T19445] ? ucma_notify+0x190/0x190 [ 677.296792][T19445] ? ucma_open+0x290/0x290 [ 677.296808][T19445] ? apparmor_file_permission+0x27/0x30 [ 677.296825][T19445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 677.296840][T19445] ? security_file_permission+0x8f/0x380 [ 677.296854][T19445] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 677.296870][T19445] __vfs_write+0x8a/0x110 [ 677.296884][T19445] ? ucma_open+0x290/0x290 [ 677.296899][T19445] vfs_write+0x268/0x5d0 [ 677.296917][T19445] ksys_write+0x220/0x290 [ 677.296933][T19445] ? __ia32_sys_read+0xb0/0xb0 [ 677.296949][T19445] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 677.296964][T19445] ? do_syscall_64+0x26/0x790 [ 677.296978][T19445] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.296992][T19445] ? do_syscall_64+0x26/0x790 [ 677.297010][T19445] __x64_sys_write+0x73/0xb0 [ 677.297027][T19445] do_syscall_64+0xfa/0x790 [ 677.297045][T19445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.297056][T19445] RIP: 0033:0x45c479 [ 677.297073][T19445] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 677.297080][T19445] RSP: 002b:00007fbe9effec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 677.297104][T19445] RAX: ffffffffffffffda RBX: 00007fbe9efff6d4 RCX: 000000000045c479 [ 677.297113][T19445] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 677.297122][T19445] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 677.297130][T19445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 677.297143][T19445] R13: 0000000000000cbe R14: 00000000004cea34 R15: 0000000000000006 [ 677.298671][T19445] Kernel Offset: disabled