ffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1469.582905] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1469.595529] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1469.602059] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1469.612907] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1469.619864] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 07:55:04 executing program 1: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000000c0)=""/95, &(0x7f0000000040)=0x5f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='bond0\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000140)=""/214, 0xd6}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000640)=""/199, 0xc7}], 0x3, 0xffff8001, 0x3) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) 07:55:04 executing program 2: socketpair(0x1, 0x2, 0x8, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000580)={0x7, 'syz_tun\x00', {0x7a}, 0x9}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYBLOB="050000000000000000b80890049f61b7548b", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="3a002a0005291f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd277107000004010000200200000010002d800a0000000202020202020000b7002a008c18a10073ee5a127217361554fbc134b53c3005ca9524c587716b9713cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a833605af69aab2f4dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf477fed3b9e48eee262f447ac487ae36d28407e93f8d26912cdc34e00004002c80"], 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x550000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000640)={0x0, 0x4c1}, 0x8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x110, r0, 0xdb3aa000) r6 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x17ac, 0x2, &(0x7f0000000280)=[{&(0x7f0000000100)="43bcf7b354fc4fe204855e9e2d52dd43b7aefa6a41387abfdcd2dcea98dc2d780c9b2dd7e88848ec65cbb914726d23", 0x2f, 0xce2}, {&(0x7f0000000140)="e7ef64339c4aad180728d2e6f174188420fc2fabf05ef3d551d35160f2bc486e5a77d69f8dd9b9d10e964df34dfc6f6340faa03be6b3341d0b1b5360cce934c826665e9d943c201b694f58124d8ca075da9f2c139f073da6c94c4aea3f705b31ae6acd119ed10847765a08c5e64a438a1cf093329061e67505f7e9051794b9c301c972eb71a5b924ff814749c1442e98838562d5ace3c3d63524e860d45481b13ffee42cb72507ba4703a5f29b12fcc503c7a1ac4fcb50c15134990e0a7cce55f4aa7cd1c39ec5103a599ba864", 0xcd, 0x80000001}], 0x800048, &(0x7f0000000380)={[{@adaptive_mode}, {@noflush_merge}, {@jqfmt_vfsold}, {}, {@whint_mode_user}], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0x4e, 0x32, 0x61, 0x62, 0x38, 0x39, 0x35], 0x2d, [0xf2, 0x61, 0x35, 0x63], 0x2d, [0x62, 0x33, 0x38, 0x65], 0x2d, [0x34, 0x39, 0x62, 0x37], 0x2d, [0x33, 0x36, 0x37, 0x33, 0x34, 0x37, 0x64, 0x66]}}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000880)={0x0, 0x4c, &(0x7f0000000680)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x80000001, @local, 0x3}, @in={0x2, 0x4e23, @local}]}, &(0x7f00000008c0)=0x10) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x3c1642, 0x0) renameat(r6, &(0x7f00000002c0)='./file0\x00', r7, &(0x7f0000000540)='./file0\x00') [ 1469.626147] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1469.633432] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1469.643241] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1469.652624] ubi: mtd0 is already attached to ubi0 [ 1469.652633] ubi0: background thread "ubi_bgt0d" started, PID 26736 [ 1469.667362] ubi: mtd0 is already attached to ubi0 [ 1469.673441] ubi: mtd0 is already attached to ubi0 07:55:04 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x64, 0x1, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0xf8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf368}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008445}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1469.683219] ubi: mtd0 is already attached to ubi0 [ 1469.693918] ubi0: detaching mtd0 [ 1469.702621] ubi0: mtd0 is detached [ 1469.718051] ubi0: attaching mtd0 [ 1469.722326] ubi0: scanning is finished 07:55:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x2, 0x1000, 0x46, &(0x7f00000000c0)="cf5a474415c1f0b9fdef85eb1446b426c2640850bf15f1f006305e7318fcf984a2c58e19af9753813087b34dacb72143ea771fef5e7761b0877cbe222efee9662e9b763b0435", 0x39, 0x0, &(0x7f0000000040)="ce696185994df8095d4056eec67f070101f28f64484eb40b781cdb8d2668baa3293f13bc01e1ed721abb2b3418ce45020a259a07c4b4b97b6a"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="39002a0005281f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd710700000401000000020000000010002d800a000000020202020202000092002a006b8c13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2000004002c80"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1469.762852] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1469.780449] ubi0: attaching mtd0 [ 1469.801533] ubi0: scanning is finished [ 1469.854221] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1469.854452] f2fs_msg: 6 callbacks suppressed [ 1469.854461] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1469.861728] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1469.867335] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1469.873392] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1469.894379] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1469.898499] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1469.902416] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1469.915049] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1469.916555] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1469.927189] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1469.940951] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 07:55:04 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1469.941114] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1469.951517] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1469.960004] ubi: mtd0 is already attached to ubi0 [ 1469.967439] ubi0: background thread "ubi_bgt0d" started, PID 26766 [ 1469.970633] ubi: mtd0 is already attached to ubi0 [ 1469.980072] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1469.990652] ubi0: detaching mtd0 07:55:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "330ecb0967d506fe4fdab1ca7e5305cd"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7fffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4c805) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1469.997914] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1470.006383] ubi0: mtd0 is detached [ 1470.011268] ubi0: attaching mtd0 [ 1470.059859] ubi0: scanning is finished [ 1470.130446] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1470.138214] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1470.144755] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1470.152135] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1470.159471] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1470.165908] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:05 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1470.173363] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1470.183121] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1470.192623] ubi0: background thread "ubi_bgt0d" started, PID 26786 [ 1470.195402] ubi: mtd0 is already attached to ubi0 [ 1470.203898] ubi0: detaching mtd0 [ 1470.216837] ubi0: mtd0 is detached [ 1470.221215] ubi0: attaching mtd0 07:55:05 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x64, 0x1, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0xf8}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xf368}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8000}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008445}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1470.255515] ubi0: scanning is finished 07:55:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="39002a0005281f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd710700000401000000020000000010002d800a000000020202020202000092002a006b8c13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2000004002c80"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = epoll_create1(0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x30000004}) r6 = dup(r3) epoll_pwait(r6, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) waitid$P_PIDFD(0x3, r6, &(0x7f00000000c0), 0x40000000, &(0x7f0000000140)) chdir(&(0x7f0000000200)='./file0\x00') ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r7 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) [ 1470.361788] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1470.369567] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1470.377331] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1470.383996] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1470.392204] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1470.398789] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1470.406490] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1470.416383] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1470.426247] ubi0: background thread "ubi_bgt0d" started, PID 26804 [ 1470.426392] ubi: mtd0 is already attached to ubi0 [ 1470.438405] ubi: mtd0 is already attached to ubi0 [ 1470.444218] ubi0: detaching mtd0 [ 1470.452554] ubi0: mtd0 is detached [ 1470.457999] ubi0: attaching mtd0 [ 1470.463700] ubi0: scanning is finished [ 1470.493103] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1470.502667] ubi0: attaching mtd0 [ 1470.512552] ubi0: scanning is finished [ 1470.562592] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1470.570204] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1470.577003] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1470.583268] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1470.590201] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1470.596562] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:05 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB='\bl\f\x00\x00\x00\x00\x00'], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1470.604119] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1470.614553] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1470.624465] ubi0: background thread "ubi_bgt0d" started, PID 26818 [ 1470.624549] ubi0: detaching mtd0 [ 1470.644174] ubi0: mtd0 is detached [ 1470.651232] ubi0: attaching mtd0 07:55:05 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1470.683554] ubi0: scanning is finished 07:55:05 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:05 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1470.807398] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1470.814284] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1470.821306] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1470.828853] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1470.836043] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1470.842220] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="146900000000000000bbee6fd87a2db620e1", @ANYRES32=r1, @ANYBLOB="39002a0005281f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd710700000401000000020000000010002d800a000000020202020202000092002a006b8c13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2000004002c80"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:05 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1470.850511] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1470.860178] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1470.869969] ubi0: background thread "ubi_bgt0d" started, PID 26838 [ 1470.869995] ubi: mtd0 is already attached to ubi0 [ 1470.881242] ubi: mtd0 is already attached to ubi0 [ 1470.886526] ubi: mtd0 is already attached to ubi0 [ 1470.891450] ubi0: detaching mtd0 [ 1470.899773] ubi0: mtd0 is detached [ 1470.936577] ubi0: attaching mtd0 07:55:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="30dcd3a32c9e3c18ac7f83ee2706810ba5542434eac74fea8b21210823c740e663f1773540de9758199caed5f4ced1458e11c913ff88d7ddbb5f4e205fd4172d6e83865eabf201b85e4d26f71b63b5cdc25487"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x6c, 0x0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private0}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}]}]}, 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000e8ddddee5a7ec87f539605b0fa614580329f8209a5f7ec268ceba56485d447fc4d2d9578739554692a53ff2c5a63e6a0f331df8e3a464fd4735559104ff7e3c8397fd546b1278eb8cbb453488e3fe865fac8ab239de213e29476ee31306cd3a1", @ANYRES16=r4, @ANYBLOB="350000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0a001800030303030303000004002400"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000a40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x90, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "42d70264"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fd3d7b7c1e"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "a43ed7946b6d10514f"}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "04fe8b36d9f6665fa4ca"}]}, 0x90}}, 0x4000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x34, r4, 0x302, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x2040090}, 0x40800) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) 07:55:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:05 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1470.967817] ubi0: scanning is finished 07:55:05 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="98030000", @ANYRES16=0x0, @ANYBLOB="af0000007000746cdf25459831ce0f0d8b083adb75f38bebe02d69b81efe2f8f8d8c3afe17cecae9b6983601b9e7517a57acd93d7b1213efc3f9100f553fb17475ff88a86f5d17355079843895cf948616128e573a66d5a8e7e999ad280140aa3f27b3a5018cf2a4177113e5224ff2fc4c482750f83bbaa4fc4e562c959655669c9722b55470709a1e3c22711cced7e8d94b51414e5748cda41a676754e72b8f9a1a88304102fb26a124d6c47f5f3855526dff3423df6bd9b14297147a5933c68de473af12d589ee8ae2e6b91fec56cef9cca605bc006b794a0ba241", @ANYRES32=0x0, @ANYBLOB="0a00f500de7660fa5b450000040087000800dc007f00000018037d80e200020090b1b32c257705e0acab1e87a59f67dba1af2e1e944c8e13ff43a3ec5213b138cc0a80df4c38f4451c0fc973da6a03ae3659e7e55d4808b0ef8053b99a82aaf48aa13d906d8780fc310c99ca947d2186c892624ebd642c9cf90e5fc48d4030f4b80d853fed5c4fc08abc96f19554032a58330172032f9c5556ff1455e8deca2d0020191b006a9aa5f4aec61f7f111e27cd4bb937aa88e487223607e5ca5e5ee5e08a6f814f252735fdafb66aabc34bf2cef47bc0c824d893016cf3061a9d614d0046a44cb9dfa08fd54e6e10ef6d6a7f5f0eb630bf1ba35ffac2fb0ee01e0000590000000c87b8c187b4357133b38aa8e73dd174be238b35b58a1f255b6665fe9133e189157d64919b0376b14898114e4319801d48fb7d86682d2263586a8c1fe001eb4ce53aba169354dac9517de83650f65324c0082f7c30000000a5000200438708f2bdcb07b912a9f9acb1b9d991a728a7e50d7aef79c6f92d884f6922d3c5805776619fbfcc2ad5bf356a8233cfff897a66cf0afed0093ef87e1bb60fb5f738c9e7e606c41d41f0f37994aecd5638b5bdb3e7210703c80d886f936fb5154e96b2bb6311228d5467864efe5b8bbb5799a53291c0cde6e158ad43580513ab6b168b1883da0931c132723d55e8fd7095b7e0f6c12cda0e1ca48899a47cf8182f0000006b0003000253373abcf8394473540f1322a66be7539599ff9e515848bd2851deb2e1fa0920dccd2476494361f36b807105bf6bcde2c22d9bcb1f6827237b25ffecc72bb9bd7d58ff02bdf2f29ca8ef8c6250473bce1215cda645a176aaab6bcc5b2db4cbfee770e294e77e0088000000072d28f5c005001875b38eb72158dbd40b8480cf257218b52eeed0fe7575ae750bae2dd2cc6d79ab877e346b9b0a0959b207ff43ed19086b5885b9beec5020af452f0f750cc244ac141658c1e1daf24e206ea20434d5a6530311913cdde0f80078c73ebf8663c64bdc3e8c7f74641ee41fed0f8d709def9ed8ad083d049e17fe1bb3775e38000300b22a70b6d1fcf62cc67f03cb6aa818b59a20e67a9ea7c4c325ef258a3f1f8657982a54de7e9572cb931d5144506a4a14a43a8b1d380084801f000100aff4b125bdbe9e119babbb8cd2a7828adb30abe3ce18b840000000000a000100020202020202000008000200070000000500f6000200000008009e00800100000400ff00"], 0x398}, 0x1, 0x0, 0x0, 0x2404c8d4}, 0x200008c0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x30000004}) r4 = dup(0xffffffffffffffff) epoll_pwait(r4, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f00000001c0)={&(0x7f00007b3000/0x1000)=nil}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7f, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5c3fded4, 0x3}, 0x40, 0x0, 0x7, 0x7, 0x0, 0x4, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r0, 0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 07:55:06 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:06 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1471.115804] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1471.122912] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1471.133947] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1471.140988] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1471.148607] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1471.156763] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1471.164606] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1471.174986] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1471.184561] ubi0: background thread "ubi_bgt0d" started, PID 26867 [ 1471.191177] ubi0: detaching mtd0 [ 1471.202488] ubi0: mtd0 is detached [ 1471.206943] ubi0: attaching mtd0 [ 1471.231666] ubi0: scanning is finished [ 1471.302402] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1471.309410] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1471.317403] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1471.324155] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1471.332079] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1471.339184] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1471.347530] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1471.357635] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1471.368149] ubi0: background thread "ubi_bgt0d" started, PID 26882 [ 1471.368800] ubi: mtd0 is already attached to ubi0 [ 1471.380926] ubi: mtd0 is already attached to ubi0 [ 1471.386349] ubi: mtd0 is already attached to ubi0 [ 1471.396858] ubi0: detaching mtd0 [ 1471.402034] ubi0: mtd0 is detached [ 1471.407234] ubi0: attaching mtd0 [ 1471.437561] ubi0: scanning is finished 07:55:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x70bd2d, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1471.491731] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1471.506257] ubi0: attaching mtd0 [ 1471.510418] ubi0: scanning is finished 07:55:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:06 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newlinkprop={0x28, 0x6c, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20182, 0x20}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4f23}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 07:55:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB='\bl\f\x00\x00\x00\x00\x00'], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="04002bbd70defddbdf2521000000080003003579df7cb559341bfd3881a124ca354483cf5332c43168b6e6c2f376d7c6ba46ce903c8cb13aec3592b613a023cb1a76c857421541163e33324c698690b5e9714422b7cb15fb7522e22471d5a586c6fcd414b16683cdf5fdd9b0b8d1f341c0d8927682f641e0d966c061dce26a11559296e71611590d7dab99e73deb670aa89dfdd1bc6aa7de5064f879de5d84912d160b51f782decf451c3b26e40771738d441c1359a2efc4a4ba70ff0ae8f40c55099d92cc596702444b4ef3191f4e543f3ba26402b007dde743f78a1b7d1ab7e1086415f40f09fd", @ANYRES32=r1, @ANYBLOB="39002a0005281f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd710700000401000000020000000010002d800a000000020202020202000092002a006b8c13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2000004002c80"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000040)=""/47, 0x5}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00'}) [ 1471.580481] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1471.610100] ubi0: attaching mtd0 [ 1471.614289] ubi0: scanning is finished 07:55:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0xc26]}, 0x8) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000140)={0xfffffffe, 0x3000000, "c2eaf2aebfca25c3bac92d820484eecb65ba1e8d98e5f0e7", {0xff, 0x1f}, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) dup(r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)=@sha1={0x1, "bc8790aa85ddd2d53471857838b44f4e96213423"}, 0x15, 0x2) r5 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x6acb890c, 0x216403) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000380)=0x1a, 0x4) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x550000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40046f41, 0x76006e) [ 1471.688807] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1471.720059] ubi0: attaching mtd0 [ 1471.767620] ubi0: scanning is finished 07:55:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="146900000000000000bbee6fd87a2db620e1", @ANYRES32=r1, @ANYBLOB="39002a0005281f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd710700000401000000020000000010002d800a000000020202020202000092002a006b8c13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2000004002c80"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1471.897810] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1471.917110] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1471.934790] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1471.950015] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1471.966568] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1471.980009] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1471.996770] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1472.016939] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1472.036980] ubi: mtd0 is already attached to ubi0 [ 1472.043908] ubi0: background thread "ubi_bgt0d" started, PID 26932 [ 1472.054215] ubi0: detaching mtd0 [ 1472.064300] ubi0: mtd0 is detached [ 1472.071484] ubi0: attaching mtd0 07:55:07 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100f8b57b07918753e2de49fd65cd22000008000300", @ANYRES32=r1, @ANYBLOB="10002d800a0000000202020202020000b7002a008c18a10073ee5a127217361554fbc134b53c3005ca9524c587716b9713cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e00004002c80"], 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x488, 0xffffffff, 0x2b8, 0xc8, 0x0, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0x48, 0x30, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@remote, @local, 0xff, 0xffffffff, 'sit0\x00', 'ip6gre0\x00', {0xff}, {}, 0x32, 0x0, 0x44}, 0x0, 0x190, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x7, 0x0, 0x2, 0x6, 0x1, 0x7], 0x1}, {0xffffffffffffffff, [0x0, 0x5, 0x0, 0x5, 0x3, 0x4], 0x1, 0x7}}}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x0, 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3, 0x4}, {0x0, 0x2, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1472.135709] ubi0: scanning is finished [ 1472.296211] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1472.306607] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1472.321126] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1472.334584] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1472.342430] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1472.349479] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1472.357364] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1472.367376] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1472.377453] ubi0: background thread "ubi_bgt0d" started, PID 26949 [ 1472.384154] ubi: mtd0 is already attached to ubi0 [ 1472.390593] ubi: mtd0 is already attached to ubi0 07:55:07 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1472.396964] ubi0: detaching mtd0 [ 1472.411598] ubi0: mtd0 is detached [ 1472.418847] ubi0: attaching mtd0 [ 1472.423592] ubi0: scanning is finished 07:55:07 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1472.548332] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1472.582677] ubi0: attaching mtd0 [ 1472.608928] ubi0: scanning is finished [ 1472.782749] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1472.790021] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1472.797370] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1472.803818] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1472.813030] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1472.819649] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1472.827518] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1472.837248] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1472.846872] ubi0: background thread "ubi_bgt0d" started, PID 26970 [ 1472.847106] ubi0: detaching mtd0 [ 1472.867668] ubi0: mtd0 is detached [ 1472.872026] ubi0: attaching mtd0 07:55:07 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70b529, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x34}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4081) 07:55:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="146900000000000000bbee6fd87a2db620e1", @ANYRES32=r1, @ANYBLOB="39002a0005281f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd710700000401000000020000000010002d800a000000020202020202000092002a006b8c13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2000004002c80"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1472.887857] ubi0: scanning is finished 07:55:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = syz_open_dev$cec(&(0x7f00000001c0), 0x2, 0x2) finit_module(r4, &(0x7f0000000200)='wlan0\x00', 0x3) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000040)={0x6, 0x0, 0x10000}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0xa800, 0x0) accept(r6, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x80) [ 1473.001174] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1473.008878] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1473.019681] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1473.026505] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1473.033231] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1473.039721] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1473.047188] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1473.056646] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1473.066059] ubi0: background thread "ubi_bgt0d" started, PID 26987 [ 1473.066172] ubi: mtd0 is already attached to ubi0 [ 1473.077502] ubi: mtd0 is already attached to ubi0 [ 1473.082474] ubi0: detaching mtd0 [ 1473.092929] ubi0: mtd0 is detached 07:55:08 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x24}, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8001) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r5 = socket$inet6(0xa, 0x6, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="08010000a4a31cc26254eb0d39192c24857017f72f73bc17297829602e923cce2e51e0ad57b12ab2da16eff0e14394adefd477aa15dea0db2e0334c66df5c530db426dab23e253da1fb1b7aba6073c5b23df7fde1c2c90f839197a2400cbd89f9f07f8e7fc5bdcd5b7c521613127525895a23aedb9e70a3bbc6b8653453f8a51d32b0afbb7b482ad3b121201251927e5bdd90345", @ANYRES64=r5, @ANYRES16, @ANYRESOCT=r4, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) r7 = syz_usbip_server_init(0x3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r7, 0xb6187000) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000000840)) r8 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r8, 0x40046f41, 0x76006e) [ 1473.101504] ubi0: attaching mtd0 [ 1473.147490] ubi0: scanning is finished [ 1473.203948] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1473.209781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1473.218458] vhci_hcd vhci_hcd.0: Device attached [ 1473.222170] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1473.230734] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1473.239506] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1473.246805] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1473.253519] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1473.259901] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1473.267559] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1473.277858] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1473.287703] ubi0: detaching mtd0 [ 1473.287815] ubi0: background thread "ubi_bgt0d" started, PID 27004 [ 1473.301157] ubi0: mtd0 is detached [ 1473.306062] ubi0: attaching mtd0 [ 1473.318835] ubi0: scanning is finished [ 1473.371219] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1473.378274] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1473.385087] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1473.391579] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1473.399196] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1473.406359] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:08 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x1f9) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1473.413825] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1473.423359] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1473.432890] ubi0: background thread "ubi_bgt0d" started, PID 27010 [ 1473.439333] ubi: mtd0 is already attached to ubi0 [ 1473.444378] ubi: mtd0 is already attached to ubi0 [ 1473.449922] ubi0: detaching mtd0 [ 1473.462304] ubi0: mtd0 is detached [ 1473.466032] ubi0: attaching mtd0 [ 1473.470173] ubi0: scanning is finished 07:55:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="146900000000000000bbee6fd87a2db620e1", @ANYRES32=r1, @ANYBLOB="39002a0005281f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd710700000401000000020000000010002d800a000000020202020202000092002a006b8c13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2000004002c80"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x80, 0x10000, 0x3, 0x42c, 0xffffffffffffffff, 0xcc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x40) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1473.494839] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 1473.519384] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1473.542827] ubi0: attaching mtd0 07:55:08 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1473.577102] ubi0: scanning is finished 07:55:08 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:08 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:08 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1473.710445] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1473.731274] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1473.738399] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1473.747121] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1473.757746] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1473.764039] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1473.772855] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1473.782969] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1473.792987] ubi0: background thread "ubi_bgt0d" started, PID 27040 [ 1473.795862] ubi: mtd0 is already attached to ubi0 [ 1473.805129] ubi: mtd0 is already attached to ubi0 07:55:08 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0xc008ae88, &(0x7f0000001a40)={"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"}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x550000) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000c00)=0x0) syz_mount_image$efs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x20, 0x9, &(0x7f0000000a40)=[{&(0x7f0000000100)="860fb3d514fcea3315771536e74d94dc0e9a45e2108286405e58cd815b767c54dc4dcc640b9a1ea55cd646143c65d7ceda7f77a050ea1038fd46de6bda556ef348e7800f562e6e2df210670583b829cf5ecca5d784c03ca14476073a1d1f14b25f36ac81db1c166bde9044d5c6889b1aa1f98a521fa6ea7f4672f3bc4e64384d1f2ae94c3ed3ee0ab4ead33d9184e89a72a252490c77c075225425", 0x9b, 0x1f}, {&(0x7f0000000380)="65dd912677e807707bf816cdd61e3fc071bbebd37419846c172bbaa02c533ec77ede76d96e95f366ad0631c1850801beed4ced53667f5f528ca2d72480924b23a90f0c29b7bb9b59f62a07313032c6a8c69ded84206e77c202b00cb83a617ea0ca67ca2f8eb4e1bbf3a24426e07bf6e1576cca0c3ea49e8fc77fe6034a9c83919fb75b3e9e1f1648341b2961c6367973da4cfcb5ac44b24db84fcf938b7e45835ccc8ec029c4e08986383ba96fce3ec1392b384fab28aa8c9f41f64de8277cb7b079a20dd348a2fb7ff19a5b60cf52e16b92bb1e17252f2b9006ff6aba26482a2f943f2b003a3484480be1fb793be5c842e9", 0xf2, 0x7c728b98}, {&(0x7f0000000500)="896c3dc445c38dfb1a82ac24acdb3d7ba1be4b3a02d483223b59ed0b98e089f4a81383a474e6de4e4b6c7b81ae42787833afbcf3af3568efd2f311dbed6579a7daaecd37a0227f8e295991d39f08f0f129bc947e239b46b6762fd36194e0fc9076eecc5690c55eb1eb7868f5b570e6e6df1a32fa3c3c54011a33083772fb6dc645b8d1834023210b4f0d4dec2731ed8caefc471a74e28f8048a3722f9f97172f", 0xa0, 0x2}, {&(0x7f00000001c0)="3713a1cae0963d", 0x7, 0x6}, {&(0x7f0000000640)="8edec5aa5968ab79d4c1b923a353bd235f4dc6c15f91d9341e05e82d098d3a37b90165a0cafd71fc4676a82d335e7c893818f45d396b9168d4d9ea31c799153fcd3c72dfa60edab7ff29e3f94b3cf6b1169a489d588e0827ae95114561f1fe01e7070403549fcc385e3b7328239a68516eb31367102076a7b282837efa33298fd42c514107bbe0b9fc62a2627fee8fe2b9e953c3108496c488d71bfa24ba45f71545d3b481362e1b34fa89071c21710f4a122fbee6aacc7861b61bcf365f8841633a7836579094af569d3a25a798107015abeaf481e00e68348076c804a61d719489a06ba199f0c34bb17fd7d2a556", 0xef, 0x4}, {&(0x7f0000000880)="9d37d1c84af6256d5a801ef875afd6a37bed4f77327daed880f01f1c92a7664c0bf0a0b43db005fbbf882f9df265502611bf3769a16bbfa944957557207ce9fe189b5d0cad22a10eaa783fe55da7abf1ba60fc60582fb52366a3fff60152682d4715606ef822ba84672f00c2c3f229f8d0ff7496bc8efd116ba00eba50a6fed4916794bf0bc5098e2d247085d84293a12775126da9cca929c769", 0x9a, 0xffffffffffffffc5}, {&(0x7f0000000280)="9e872ac1d8381aef3c5e130e63cc0928618837e8000985105f5661a5e30a58b09c4853572346936c4d89abf243ad02555f2f53dbb46e20b286e5b1d93ed627cfd0eae19a4745d9057edd065dce74e1db5b24963b4640f022b3fafc7439f8b43ddb3b6c50c9f16d53107aef032e7e34613f39c27bfe", 0x75, 0x4}, {&(0x7f0000000940)="59ebd435574cafa914bd452137c6af9dbf065d67f9f681883ce3a93aecffb23d4e42acc4189eb3d91d2725f5a0c4ef199eb0b38d8954df33a8837f77f9fe718c88f831fb6e6548db13f481c4a05abb14a71bd71a919c7578a7c67cc6832284032cee045dc4c61b374824a1735b1aa470d0d7de3dec3f238518653c64e311ae240afb4ffc9e7066be6894a62cb40e94a107c5eb986ee9c32172efd3628d95ed1c3511611b6ec37a36e9e7118913b4f62dde4245cbd9bfe2bba891f9a6d45ea9229af62f86d459627d6a899a", 0xcb, 0x4}, {&(0x7f0000000200)="39ca3150d8717d012f2dc98e629d21564cfcd67fdfdb325b85c4d735302a906ef33e45f75cdd6013049d11f625bc7c9035503176994bbd615a56", 0x3a, 0x8}], 0x101000, &(0x7f0000000b40)={[{'!)'}, {'/dev/ubi_ctrl\x00'}, {'wlan0\x00'}], [{@uid_gt={'uid>', r6}}]}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) [ 1473.810123] ubi: mtd0 is already attached to ubi0 [ 1473.817909] vhci_hcd: connection reset by peer [ 1473.821225] ubi0: detaching mtd0 [ 1473.828297] ubi0: mtd0 is detached [ 1473.832410] ubi0: attaching mtd0 [ 1473.844885] vhci_hcd: stop threads [ 1473.848549] vhci_hcd: release socket 07:55:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70b529, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x34}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4081) [ 1473.861628] vhci_hcd: disconnect device [ 1473.895150] ubi0: scanning is finished [ 1473.961813] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1473.969485] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1473.977838] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1473.984165] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1473.991474] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1473.997920] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1474.005569] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1474.015785] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1474.025790] ubi: mtd0 is already attached to ubi0 [ 1474.029089] ubi0: background thread "ubi_bgt0d" started, PID 27064 [ 1474.030689] ubi: mtd0 is already attached to ubi0 [ 1474.049213] ubi: mtd0 is already attached to ubi0 [ 1474.067491] ubi: mtd0 is already attached to ubi0 [ 1474.072464] ubi0: detaching mtd0 [ 1474.077530] ubi0: mtd0 is detached [ 1474.098519] ubi0: attaching mtd0 [ 1474.117624] ubi0: scanning is finished [ 1474.196664] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1474.205420] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1474.211998] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1474.219426] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1474.226757] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1474.232835] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1474.240210] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1474.249637] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1474.258904] ubi0: background thread "ubi_bgt0d" started, PID 27087 [ 1474.259916] ubi0: detaching mtd0 [ 1474.270068] ubi0: mtd0 is detached [ 1474.335339] ubi0: attaching mtd0 [ 1474.339193] ubi0: scanning is finished [ 1474.369910] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1474.376997] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1474.383512] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1474.391426] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1474.398650] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1474.404896] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1474.412166] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1474.421650] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 07:55:09 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 07:55:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040811) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) 07:55:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="2714b712", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="39002a0005281f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd710700000401000000020000000010002d800a000000020202020202000092002a006b8c13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2000004002c80"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x200, 0x70b529, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x34}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4081) 07:55:09 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000001a80)={0x120, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0xe9, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @tim={0x5, 0xb4, {0x6, 0x6, 0x6, "d8e34965d14d2a5bd55c8d528e6af197d85c1d218abc890b2633f0e9547261bb42802c86f47a6385c83d9e19e09bd9ed32b280770c030378b49c20bb2d5b83e4c7fc339ddb234b839b848a2a221e560f335d1643ff049c7aebf3ee9fb18b5f2d846d859268e27842e948019cc112e16b349f82d1043aed2534a73b2ec52c2ea611845817202bc7e65b1fd9d483288c2861dcb30fa0aa9c948f9a46740c394702ce6a27c5d1e68e25079a986bab1e960ff1"}}, @supported_rates={0x1, 0x2, [{0x60, 0x1}, {0x36, 0x1}]}]}, @NL80211_ATTR_SCAN_SSIDS={0x6d, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) syz_mount_image$qnx4(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000000880)="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", 0x1000, 0x2}, {&(0x7f0000001880)="9ca19d30cc0fa24e300a4d7b761c3fc38719ec5cb7cf290bc678250fead141317916811b219e1892b5f3afa54e6576156dd58145e4a85a631099dd7218e54d800d03ea06e4ff4829f0db15ee864a1333b81f69168b1776b35e2134669429680d5878acd74fa9f5c489c666d507c93256367eabb57ca5235c0254c9a131ef115ab336343bde96d682b3e9dda44fbabae4fc33fc95ed4be79b7d436762aec7f149030f7d1fdbab2303cb590306470a223c5c4ac676e619bd13f96475d73656ffc02ad6bf6de65197b6e74f9e12f101f42e9cd137aa8d3ffa11c350ad247f6257a6a02b3cf45ccca80acafcc7aabad145f2", 0xf0, 0x6}], 0x1908002, &(0x7f0000000640)={[{')#'}, {'wlan0\x00'}, {'wlan0\x00'}, {'/dev/ubi_ctrl\x00'}], [{@obj_type={'obj_type', 0x3d, '$\x05\x1f*.-'}}, {@subj_type={'subj_type', 0x3d, '\x02\x02\x02\x02\x02\x02'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@uid_gt}, {@fowner_lt={'fowner<', r3}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsname}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x65, 0x39, 0x33, 0x62, 0x30, 0x35, 0x31], 0x2d, [0x30, 0x64, 0x62, 0x34], 0x2d, [0x36, 0x30, 0x32, 0x39], 0x2d, [0x34, 0x56, 0x63, 0x62], 0x2d, [0x64, 0x63, 0x36, 0x65, 0x61, 0x39, 0x39, 0x62]}}}]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000100)=0x1) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1474.430932] ubi0: background thread "ubi_bgt0d" started, PID 27095 07:55:09 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x24}, 0x10) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8001) dup3(r2, r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r5 = socket$inet6(0xa, 0x6, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="08010000a4a31cc26254eb0d39192c24857017f72f73bc17297829602e923cce2e51e0ad57b12ab2da16eff0e14394adefd477aa15dea0db2e0334c66df5c530db426dab23e253da1fb1b7aba6073c5b23df7fde1c2c90f839197a2400cbd89f9f07f8e7fc5bdcd5b7c521613127525895a23aedb9e70a3bbc6b8653453f8a51d32b0afbb7b482ad3b121201251927e5bdd90345", @ANYRES64=r5, @ANYRES16, @ANYRESOCT=r4, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) r7 = syz_usbip_server_init(0x3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000001, 0x10, r7, 0xb6187000) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, &(0x7f0000000840)) r8 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r8, 0x40046f41, 0x76006e) [ 1474.456491] ubi: mtd0 is already attached to ubi0 [ 1474.463676] ubi: mtd0 is already attached to ubi0 [ 1474.478382] ubi: mtd0 is already attached to ubi0 [ 1474.483396] ubi: mtd0 is already attached to ubi0 [ 1474.493472] ubi0: detaching mtd0 [ 1474.546169] ubi0: mtd0 is detached [ 1474.555690] ubi0: attaching mtd0 [ 1474.564074] ubi0: scanning is finished [ 1474.628868] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1474.636806] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1474.643542] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1474.650402] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1474.657966] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1474.664261] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:09 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="080060f002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1474.672009] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1474.682615] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1474.683696] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1474.692796] ubi: mtd0 is already attached to ubi0 [ 1474.697637] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1474.697953] ubi0: background thread "ubi_bgt0d" started, PID 27131 [ 1474.715928] ubi: mtd0 is already attached to ubi0 [ 1474.720974] ubi0: detaching mtd0 07:55:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x44}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vti={{0x8}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x7}, @IFLA_VTI_LINK={0x8, 0x1, r4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x78}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x6c}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}], @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010100}, @IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}, @vti_common_policy]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x90}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x16, 0xffffffff, 0x2, 0x100, 0x1444, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x2, 0x400, 0x1}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') fsetxattr$security_ima(r2, &(0x7f0000000100), &(0x7f0000000140)=@md5={0x1, "3c5fb62abd90f0ec2d2a1330151aacf6"}, 0x11, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x550000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='wlan0\x00') ioctl$ASHMEM_GET_SIZE(r6, 0x40046f41, 0x76006e) 07:55:09 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1474.753780] ubi0: mtd0 is detached [ 1474.766105] ubi0: attaching mtd0 [ 1474.770542] ubi0: scanning is finished [ 1474.790726] vhci_hcd vhci_hcd.0: Device attached 07:55:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)={0x134, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1000, 0x39}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], &(0x7f0000000200)=0x28) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1474.848845] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1474.865516] ubi0: attaching mtd0 07:55:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1474.913113] ubi0: scanning is finished 07:55:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1475.054837] usb 13-1: new high-speed USB device number 2 using vhci_hcd [ 1475.079817] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1475.087451] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1475.094322] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1475.102257] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1475.109785] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1475.116101] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1475.123492] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1475.133037] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1475.142522] ubi0: background thread "ubi_bgt0d" started, PID 27179 [ 1475.143328] ubi: mtd0 is already attached to ubi0 07:55:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000ca8599df627f0a8188bc55ca0006000000080003006d33cdb1e56824ad26e86b1096e973bcc145a68a6177037f596d0f62e55ac1f081b9d303459b0e2aa402fff7e920da3e416cee808a3493b3932ff601256f18aae70aaec14b31c336fef0d6561c28d334fb8da60eee65301dcc527ab825ae2f25a00370a05ba2", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000880)={{0x0, 0x7f, 0x7e8, 0x81, 0x5, 0x0, 0x4, 0x1000, 0x5, 0x9, 0x3ae, 0x7, 0xe3, 0x1, 0x1}}) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1475.154844] ubi: mtd0 is already attached to ubi0 [ 1475.161053] ubi: mtd0 is already attached to ubi0 [ 1475.167836] ubi: mtd0 is already attached to ubi0 [ 1475.172854] ubi0: detaching mtd0 [ 1475.179479] ubi0: mtd0 is detached [ 1475.194347] ubi0: attaching mtd0 [ 1475.198796] ubi0: scanning is finished [ 1475.242939] vhci_hcd: connection reset by peer [ 1475.247721] vhci_hcd: stop threads [ 1475.253254] vhci_hcd: release socket [ 1475.261167] vhci_hcd: disconnect device [ 1475.268013] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1475.281141] ubi0: attaching mtd0 [ 1475.298191] ubi0: scanning is finished [ 1475.348292] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1475.355619] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1475.362158] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1475.369564] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1475.377442] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1475.383558] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1475.391721] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1475.402198] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1475.411949] ubi: mtd0 is already attached to ubi0 [ 1475.412649] ubi0: background thread "ubi_bgt0d" started, PID 27200 [ 1475.416950] ubi0: detaching mtd0 [ 1475.428795] ubi0: mtd0 is detached [ 1475.452701] ubi0: attaching mtd0 [ 1475.464263] ubi0: scanning is finished [ 1475.519751] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1475.527463] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1475.534097] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1475.540719] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1475.548295] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1475.554374] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1475.562436] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1475.571948] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1475.581284] ubi0: background thread "ubi_bgt0d" started, PID 27207 [ 1475.581321] ubi0: detaching mtd0 [ 1475.592647] ubi0: mtd0 is detached 07:55:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) 07:55:10 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x6090) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000000)='wlan0\x00') 07:55:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x4048040) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000001c0)='bond0\x00') sendmsg$nl_route_sched(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getqdisc={0x40, 0x26, 0x400, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1ffe6, 0x6}, {0x1, 0xb}, {0xb, 0x5}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}}, 0x8080) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) 07:55:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') dup2(r0, r2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x30000004}) r6 = dup(0xffffffffffffffff) epoll_pwait(r6, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x80, 0x7f, 0x81, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0xfff, 0x6}, 0x10000, 0x6, 0x1, 0x0, 0x755, 0x8fa, 0x4, 0x0, 0x1, 0x0, 0xae7}, 0xffffffffffffffff, 0x6, r6, 0x4) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) 07:55:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050002002946da35df7481000052f2c335d945336b8ffedc3d6d9130dc4e52d367cdf8da82a2727f54528643609457eac1c19b1ed02c8f50824bb7ea251e61f3f9d057326e7bc56beda52dc3aefffcf6ed2cadba41"], 0x24}}, 0x0) setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/54) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="74400000f682b47b003ad97427d9a60a00a5d788e7dbe5e54e9c68c0d1a152eaf1214f9694b8429ea78541bf36888fb447a18c0e9df0538f403a1e4f7cd8457d705e5d59b39faed44dfd45e7ab7b3faa1c09cccaf709e6fece62258a6e2853c87282e64f55fc97721f6c6def", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="3a002a0005291f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd277107000004010000200200000010002d800a00000002020202020200000600f70004fe000004002c80"], 0x74}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7f, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="0e028c32e9a6bc554a0f583656", @ANYRES16=0x0, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564703a73797a320000000044000400200001000a00000000000000fc00000000000000000000000000000000000000200002000a00000000000000ff02000000000000000000000000000100000000"], 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r4, 0x35, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x6}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fd3d7b7c1e"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "a43ed7946b6d10514f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "04fe8b36d9f6665fa4ca"}]}, 0x78}}, 0x4000) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_IE={0xa, 0x2a, [@ssid={0x0, 0x4, @random="0409db9c"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x4010) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40046f41, 0x76006e) 07:55:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1475.781423] ubi0: attaching mtd0 07:55:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1475.822800] ubi0: scanning is finished 07:55:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) 07:55:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) 07:55:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 07:55:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1475.987904] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1475.996490] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1476.003161] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1476.024753] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1476.031640] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 07:55:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1476.038870] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1476.047599] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1476.058840] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1476.073064] ubi: mtd0 is already attached to ubi0 [ 1476.078411] ubi0: background thread "ubi_bgt0d" started, PID 27248 [ 1476.079279] ubi: mtd0 is already attached to ubi0 [ 1476.092413] ubi: mtd0 is already attached to ubi0 [ 1476.100273] ubi0: detaching mtd0 [ 1476.110956] ubi0: mtd0 is detached [ 1476.114939] ubi0: attaching mtd0 [ 1476.120526] ubi0: scanning is finished 07:55:11 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002f80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050010000000bedcf1c7072520"], 0x24}}, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000002fc0), &(0x7f0000003000)=@md5={0x1, "a16c735eeb9ed3c962f6391c29b7fe9d"}, 0x11, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000001900)=@sco, 0x80, &(0x7f0000000480)=[{&(0x7f0000001980)="b5a0a753ef9ea08d4810f08727487d2c499a1a728144531254fd8a32bf9dfa1465649f25baea94d34a3cc72796f3d2d4b4d397f039871b3c27da4d5dd8c80c3bc9e85842bdc5ca73b8445df1788a8316256e0a15305a5cfda53d157766e141467c4c8e1d3c48f07a87c7e650fed1d4bf70c20117510607e1e80fe45219b702c66cad6e202f6b2be3cc984abb959fb756979f8b910656", 0x96}], 0x1, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x13e0}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x11, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept4$inet6(r3, &(0x7f0000002e40)={0xa, 0x0, 0x0, @local}, &(0x7f0000002e80)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000002ec0)={0x0, 0x10000}, &(0x7f0000002f00)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000002f40)={r5, 0xfffffff8}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') readv(r2, &(0x7f0000001840)=[{&(0x7f0000000000)=""/128, 0x80}, {&(0x7f00000000c0)=""/116, 0x74}, {&(0x7f0000000140)=""/163, 0xa3}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000000380)=""/205, 0xcd}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000640)=""/241, 0xf1}], 0x9) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1476.188602] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1476.203591] ubi0: attaching mtd0 [ 1476.212015] ubi0: scanning is finished 07:55:11 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x4, 0xc550) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="39002a0005281f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd710700000401000000020000000010002d800a000000020202020202000092002a006b8c13cf8579b4ad2953f5b6a59a20a8e13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2000004002c80"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3, 0x80, 0x5, 0x5, 0x0, 0x2, 0x20, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x2, 0xaf8, 0x1f, 0x7, 0x3, 0xb4ea, 0x5, 0x0, 0xffffffa2, 0x0, 0x401}, r3, 0x2, r2, 0x9) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x550000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) [ 1476.266027] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1476.275980] ubi0: attaching mtd0 [ 1476.280217] ubi0: scanning is finished 07:55:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1476.319612] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1476.329781] ubi0: attaching mtd0 [ 1476.333838] ubi0: scanning is finished 07:55:11 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fd76beee8f7bd6ea4a408dbe", @ANYRES32=r1, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x4, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="c2fd177517bc02fb84f1f3651890e05f71888426124df0253f53b472e61c45f5e78819fa698f48e457360c67342d3bf5ec23ced134ab87f98f2e65d6c607e7bde725ae6b0140cbe71cf19de110a04a37870e0b4a373cd76e9912580c10b7", 0x5e, 0x8000}, {&(0x7f0000000380)="c48d08a511aa3ea0131c645e0c62fecc5ca15e5c77d3646d950be0bd00ec42f9e0d593058123d90ab0143bfe832a137d165c8fb818e6988f1e4f1899e9e017aa79e62c2aea266d0fcf1a7a15abb3be1052a296999c6d6469619d24daccbc93fa33a37e6bb8fe3f8375bf6179941fb4a32f4a17ada45c89cac69bdd63fbf5303417b49c49687aaf3d59fb24907502bf1d4afbbd5898afee808e3356e695851404b00e8847ccdf1ff7b9b14e051c8587ae33e44131a79714e9e414507f5b1465c183ec3d469d1e65325794268641f371859fc81f9faab5b21598adfa1f5a9881385803e13f3441644ba0b7c701bf70e6cd", 0xf0, 0x3}, {&(0x7f0000000180)="62a8d572621cacb6f85851d69629cb797bed13bb46c8af8521cdaf9fc4a6855b635880c681c3984aa8d524a394e6bd2f", 0x30}], 0xa801, &(0x7f0000000880)={[{@resize_auto}, {@balloc_no_unhash_reloc}, {@jdev={'jdev', 0x3d, './file0'}}, {@user_xattr}, {@resize_auto}, {@noacl}, {@jqfmt_vfsv0}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'wlan0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@dont_measure}, {@permit_directio}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}]}) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:11 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000001c0)='bond0\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r4, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2c}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44011}, 0x4080) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 07:55:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)={0x148, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x101, 0x51}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0xeb, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x67, 0xcb, "13cf8579b5ad29539bd1a59a20aae13397454a418647e90494320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb309f6800261bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x2}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') dup2(r0, r2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000100)={0x30000004}) r6 = dup(0xffffffffffffffff) epoll_pwait(r6, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x80, 0x7f, 0x81, 0x8, 0x0, 0xffffffffffffffe0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0xfff, 0x6}, 0x10000, 0x6, 0x1, 0x0, 0x755, 0x8fa, 0x4, 0x0, 0x1, 0x0, 0xae7}, 0xffffffffffffffff, 0x6, r6, 0x4) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1476.387435] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1476.401773] ubi0: attaching mtd0 [ 1476.423001] ubi0: scanning is finished [ 1476.543018] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1476.550307] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1476.558455] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1476.566254] print_req_error: I/O error, dev loop1, sector 0 [ 1476.567042] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1476.580977] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1476.588352] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1476.597401] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1476.608817] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1476.618926] ubi0: background thread "ubi_bgt0d" started, PID 27318 [ 1476.619526] ubi: mtd0 is already attached to ubi0 [ 1476.630792] ubi: mtd0 is already attached to ubi0 [ 1476.636920] ubi: mtd0 is already attached to ubi0 07:55:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1476.643873] ubi: mtd0 is already attached to ubi0 [ 1476.654694] ubi0: detaching mtd0 [ 1476.663075] ubi0: mtd0 is detached [ 1476.671800] ubi0: attaching mtd0 07:55:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1476.692903] ubi0: scanning is finished 07:55:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1476.769073] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1476.777146] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1476.785463] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1476.791803] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1476.802729] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1476.812564] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1476.820973] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1476.831871] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1476.842353] ubi0: background thread "ubi_bgt0d" started, PID 27336 [ 1476.849887] ubi0: detaching mtd0 [ 1476.858158] ubi0: mtd0 is detached [ 1476.861797] ubi0: attaching mtd0 07:55:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x200, 0x8e5f) [ 1476.868594] ubi0: scanning is finished 07:55:11 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x3, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x550000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) 07:55:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x800, 0x4) [ 1476.919418] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1476.944516] ubi0: attaching mtd0 [ 1476.967665] ubi0: scanning is finished [ 1477.025275] print_req_error: I/O error, dev loop1, sector 0 [ 1477.039868] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1477.054997] ubi0: attaching mtd0 [ 1477.072262] ubi0: scanning is finished [ 1477.161385] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1477.168393] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1477.176417] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1477.182705] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1477.189874] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1477.196236] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:12 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1', "3af86285af9bcaeedfd4c72e9dc8373e53c2506c5eb1adbc08c884aacc7e82fca1c08d163d9cbdf59e3596006b1c8aeeffc9c6b411e8a55b0e54c04fd469046424ed5ff96e29f9b264d6b29f7562fb342d993b1da1d4b3456739e57cc233f85939d697ad16e73c393be7fb74a4d7d8826637c30d9dcf3c197b72e15205210619499c90d331599974699ddb37ac06497c45106f63762cb6b057f8697903bb06f8d4c050507b4f97b66e204437048a795beda4ed564b6363889f2c7d892c28438c1b"}, 0xc5) 07:55:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x800, 0x4) 07:55:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x800, 0x4) 07:55:12 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x863bb939878d1be5, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x8, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f0000000200)}, 0x1040, 0x9, 0xff, 0x8, 0x8157, 0x200, 0x1, 0x0, 0x7, 0x0, 0xecc2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044804}, 0x4004000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x64c442, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f00000001c0)=0x1, 0x1) 07:55:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x2, 0x5, 0x6], 0x3, 0x40000, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000841) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x550000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40046f41, 0x76006e) 07:55:12 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)={0x13c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x78, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2, 0x3f, "ab2ff8dae9b177995d458198e962e71386250e256b2dcf1b62d63c1123f0a7edb7a1506e42538782f793b6203131be28070031c2afb853cb4534e6e9910c1b"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x13c}, 0x1, 0x0, 0x0, 0x803}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1477.203633] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1477.213845] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1477.223461] ubi: mtd0 is already attached to ubi0 [ 1477.223521] ubi0: background thread "ubi_bgt0d" started, PID 27377 07:55:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x800, 0x4) 07:55:12 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') mmap(&(0x7f00004fe000/0x3000)=nil, 0x3000, 0x9, 0x30, r2, 0x10867000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffef, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1477.289467] ubi: mtd0 is already attached to ubi0 [ 1477.335695] ubi: mtd0 is already attached to ubi0 [ 1477.342168] ubi: mtd0 is already attached to ubi0 [ 1477.356069] ubi0: detaching mtd0 07:55:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet(0x2, 0x800, 0x4) sendfile(0xffffffffffffffff, r6, &(0x7f00000000c0)=0x200, 0x8e5f) 07:55:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet(0x2, 0x800, 0x4) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x200, 0x8e5f) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) [ 1477.384185] ubi0: mtd0 is detached [ 1477.390930] ubi0: attaching mtd0 [ 1477.397904] ubi0: scanning is finished 07:55:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet(0x2, 0x800, 0x4) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x200, 0x8e5f) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) 07:55:12 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x6, 0x3, 0x6, @loopback, @remote, 0x10, 0xf000, 0x2ad71f26, 0x400}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0x3, 0x2, 0x63, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x7800, 0x7800, 0xfffffffb, 0x1b57}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x44}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vti={{0x8}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x7}, @IFLA_VTI_LINK={0x8, 0x1, r4}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x78}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x6c}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}], @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010100}, @IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}, @vti_common_policy]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x90}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x40, 0x511, 0x9, {{0x13, 0x4, 0x1, 0x3, 0x4c, 0x65, 0x0, 0x39, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xfc, 0x3, 0xd, [{@broadcast, 0x7f}, {@rand_addr=0x64010100, 0x3}, {@empty, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x61e}, {@empty, 0x5}]}, @timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x1, [{@multicast2, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40010f}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)={0x170, 0x0, 0x800, 0x70bd2b, 0x20, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r8, 0x40186f40, 0x550000) r9 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f0000000040)={'geneve0\x00', {0x2, 0x0, @multicast2}}) ioctl$ASHMEM_GET_SIZE(r9, 0x40046f41, 0x76006e) [ 1477.460318] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1477.479048] ubi0: attaching mtd0 [ 1477.483500] ubi0: scanning is finished [ 1477.572659] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1477.582128] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1477.589043] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1477.595667] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1477.602344] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1477.609290] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1477.616866] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1477.626248] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1477.635789] ubi0: detaching mtd0 [ 1477.636516] ubi0: background thread "ubi_bgt0d" started, PID 27436 07:55:12 executing program 1: getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="040009bd7000fddbdf250600000000000000", @ANYRES32=r1, @ANYBLOB="3a002a0005291f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd277107000004010000200200000010002d800a0000000202020202020000b7002a008c18a10073ee5a127217361554fbc134b53c3005ca9524c587716b9713cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e00004002c80"], 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000380)={"c715a72d82ebcebbc3a151855ac917b1", 0x0, r3, {0x5, 0x97}, {0x79, 0x5}, 0x8001, [0xe0, 0x0, 0x9, 0xfffffffffffffff7, 0x7fffffff, 0x5, 0x5, 0x100000001, 0x9, 0x80, 0x2, 0x7ff, 0x21, 0x8, 0x6, 0x58]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) 07:55:12 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0xdc52e000) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1477.664907] ubi0: mtd0 is detached [ 1477.668842] ubi0: attaching mtd0 [ 1477.682419] ubi0: scanning is finished 07:55:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="9b002a0005351f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e710700000401fd04200255ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b610010002d800a0000000202020202020000e9002a008c18a10073ee5a127217361554fbc134b53c3005ca9524c587716bc913cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34f2ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e00000004002c80a373ef4af20151626cd464ce06dbabcb88af6bcf57ce35e7c02890830e3603d4d168a0c58001a724d988ee20e84a62a67daf7f11b192e843dc9ece40b3fc0ab6b9c7a4bb0c7743420820a23db4b0c39a3cfff5ef805c08e3ea593cfc7cfc9501bd412b49e9355a6442e6b53b0197235abae38612348029affd0d2ce1f812ce75"], 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$adfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x186, 0x6, &(0x7f0000001900)=[{&(0x7f0000000500)="fddf0f5dc67b9ad1262789894b95cd78a9b9a5ec51cf24613e71f0756714d51061a2da9d109a4973f456067d7455cce9dcf442ffa359ea71319388", 0x3b, 0x6}, {&(0x7f0000000540)="8bbf35bed7aabcbc3da035876177e5bfd5a9b18c6b9cf6a5f83f6fedc75bec5a18ed14eee868daa97c16a509e10fc78d4c575d3845d80d929585c70a83e57ca2e434f4e12cdd06ed72ce75578d7a7eedeba223b95b6031f59d403486e891f612a42c93a391", 0x65, 0x3}, {&(0x7f0000000900)="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", 0x1000, 0x8000}, {&(0x7f0000000640)="ca4cdba16b6479e10de7eb3ce9ecb97bb11c2f4de4eda1b892c43ee07f3ab35aab8aecd24b", 0x25, 0x3}, {&(0x7f0000000680)="d573a892b2c9e5547a110dab85dbd7b9adee0d85e77c1c7bfbd05b88fd104c9ea2ccb72b", 0x24, 0x9}, {&(0x7f00000006c0)="df340cdcf4c46f750bdee2053caf117eba83f5c9865091dd5507a4f4a2c6eaef85d5d8872ab2fbeb9fc9cb2c917e664967dc3c6d7bb043e04d050361fc6d069e7c1b824b421a6c93399e1fbcd58543d2f6b376cbd69c6609603b5a80f3f8059dc8eeceda7b54b90078", 0x69, 0xff}], 0x1, &(0x7f00000019c0)={[{',\\\xa5'}, {'\x00'}], [{@audit}]}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x1f, 0x8}, 0x0) perf_event_open(&(0x7f0000001a40)={0x2, 0x80, 0x0, 0x1, 0x7f, 0x3, 0x0, 0xff, 0x4485, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000380), 0x5}, 0x11, 0x6, 0xfffffffd, 0x4, 0xffffffffffff939f, 0x1000, 0x0, 0x0, 0x9}, r3, 0xc, 0xffffffffffffffff, 0x9) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r4, 0x10000, 0x3, 0x80000000}) syz_genetlink_get_family_id$wireguard(&(0x7f0000001a00), r4) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xd4, 0xb, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x100}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_COMMENT={0x7, 0x1a, '\\\'\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x67}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffc}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000080}, 0x2404c811) [ 1477.734029] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1477.744822] ubi0: attaching mtd0 [ 1477.751620] ubi0: scanning is finished [ 1477.843052] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1477.851334] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1477.860122] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1477.868016] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1477.876172] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1477.882763] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1477.888137] ADFS-fs: unrecognised mount option "\¥" or missing value [ 1477.892254] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1477.907468] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1477.917557] ubi: mtd0 is already attached to ubi0 [ 1477.919884] ubi0: background thread "ubi_bgt0d" started, PID 27465 [ 1477.923532] ubi: mtd0 is already attached to ubi0 [ 1477.936207] ubi: mtd0 is already attached to ubi0 07:55:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x2, 0x5, 0x6], 0x3, 0x40000, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000841) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x550000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40046f41, 0x76006e) 07:55:12 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xaf, 0x2a, [@mic={0x8c, 0x10, {0xa1, "73ee5a127217", @short="0c12d1adb8983506"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x100}, {0x8, 0x0, 0x81}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000001c0)='bond0\x00') dup2(r2, r3) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 07:55:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz1', "3af86285af9bcaeedfd4c72e9dc8373e53c2506c5eb1adbc08c884aacc7e82fca1c08d163d9cbdf59e3596006b1c8aeeffc9c6b411e8a55b0e54c04fd469046424ed5ff96e29f9b264d6b29f7562fb342d993b1da1d4b3456739e57cc233f85939d697ad16e73c393be7fb74a4d7d8826637c30d9dcf3c197b72e15205210619499c90d331599974699ddb37ac06497c45106f63762cb6b057f8697903bb06f8d4c050507b4f97b66e204437048a795beda4ed564b6363889f2c7d892c28438c1b"}, 0xc5) [ 1477.942700] ubi: mtd0 is already attached to ubi0 [ 1477.957663] ubi0: detaching mtd0 [ 1477.966011] ubi0: mtd0 is detached [ 1477.970952] ubi0: attaching mtd0 [ 1478.010615] ubi0: scanning is finished [ 1478.108272] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1478.115794] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1478.122663] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1478.130113] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1478.137692] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1478.143804] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1478.152844] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1478.163011] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1478.172484] ubi0: background thread "ubi_bgt0d" started, PID 27488 [ 1478.173454] ubi0: detaching mtd0 [ 1478.187601] ubi0: mtd0 is detached [ 1478.191551] ubi0: attaching mtd0 [ 1478.197179] ubi0: scanning is finished [ 1478.202833] ADFS-fs: unrecognised mount option "\¥" or missing value 07:55:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = syz_open_dev$mouse(&(0x7f0000000040), 0x6, 0x20000) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1478.244763] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1478.253456] ubi0: attaching mtd0 [ 1478.259269] ubi0: scanning is finished 07:55:13 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="000000000001fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x4, 0x4, 0x7c) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1478.309554] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1478.321439] ubi0: attaching mtd0 [ 1478.346724] ubi0: scanning is finished [ 1478.407371] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1478.414453] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1478.421026] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1478.427714] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1478.434803] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1478.441021] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:13 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000010", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1478.448690] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1478.458190] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1478.467836] ubi0: background thread "ubi_bgt0d" started, PID 27516 [ 1478.471319] ubi: mtd0 is already attached to ubi0 [ 1478.480590] ubi: mtd0 is already attached to ubi0 [ 1478.486626] ubi0: detaching mtd0 [ 1478.493912] ubi0: mtd0 is detached [ 1478.499449] ubi0: attaching mtd0 07:55:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet(0x2, 0x800, 0x4) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x200, 0x8e5f) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 07:55:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x2, 0x5, 0x6], 0x3, 0x40000, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000841) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x550000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40046f41, 0x76006e) [ 1478.520283] ubi0: scanning is finished [ 1478.626034] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1478.632884] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1478.641387] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1478.648782] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1478.656195] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1478.662492] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1478.670882] vhci_hcd: vhci_device speed not set [ 1478.674335] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1478.685603] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1478.695193] ubi0: background thread "ubi_bgt0d" started, PID 27535 [ 1478.701590] ubi: mtd0 is already attached to ubi0 [ 1478.709144] ubi0: detaching mtd0 [ 1478.715843] ubi0: mtd0 is detached [ 1478.721360] ubi0: attaching mtd0 [ 1478.728791] ubi0: scanning is finished 07:55:13 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="e82b0000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="10002d800a0000000202020202020000b7002a008c18a10073ee5a127217361554fbc134b53c3005ca9524c587716b9713cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e00004002c80"], 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000051}, 0x4040841) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000756000/0x1000)=nil, &(0x7f00006d0000/0x3000)=nil, 0x1000}) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x550000) fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.origin\x00') openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1478.764906] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1478.775951] ubi0: attaching mtd0 [ 1478.800604] ubi0: scanning is finished [ 1478.860626] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1478.867620] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1478.874118] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1478.881424] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1478.889596] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1478.897237] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1478.905979] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1478.916137] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1478.926199] ubi0: background thread "ubi_bgt0d" started, PID 27554 [ 1478.926911] ubi: mtd0 is already attached to ubi0 [ 1478.938253] ubi0: detaching mtd0 [ 1478.944176] ubi0: mtd0 is detached [ 1478.951404] ubi0: attaching mtd0 [ 1478.959556] ubi0: scanning is finished [ 1479.009601] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1479.016740] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1479.023259] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1479.030657] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1479.038887] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1479.046459] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet(0x2, 0x800, 0x4) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x200, 0x8e5f) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 1479.053768] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1479.063451] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1479.073126] ubi0: background thread "ubi_bgt0d" started, PID 27561 [ 1479.080016] ubi0: detaching mtd0 [ 1479.094830] ubi0: mtd0 is detached 07:55:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet(0x2, 0x800, 0x4) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x200, 0x8e5f) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 1479.109691] ubi0: attaching mtd0 [ 1479.121358] ubi0: scanning is finished 07:55:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8003}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000040)='wlan0\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='}}\\\x00') r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "53e19b4eba"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x42}, 0x40010) [ 1479.186223] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1479.202216] ubi0: attaching mtd0 [ 1479.208932] ubi0: scanning is finished 07:55:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x48081) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="67e89375303a44eaff0000b57bab79778a010cb9cf3d7cb4611dbddbfc110726c0ee278ddac60eac9b6be0fc3bfa8bdb3e8701c1f40c46b370f40756f5", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300b567b29ff5122d1be464f1c0f5a2e0c1f2446ac44d9da54efa838c49ddf66e19ff3594e758f9bb950ab7db2013e7607ca462ff2e98480b62f0943ff520dd51427d7361be2560f15bbd41fa179717094028c7740d59548cb80168f4c02ab329a142d97b7ca7feb1d5d3c3ae1740bc70fb6536a340ea8346c70a731332e47d0a0a82e986059b8ea83c184473e094c5df604e39ee4788e1489e4f044ffd94ebddd10a861792df097ffa6dc3fb07152e1b3753429bdc31a224", @ANYRES32=r1, @ANYBLOB="0000990001000000630000003a002a0005291f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd277107000004010000200200000010002d800a0000000202020202020000b7002a008c18a50073ee5a127217361554fbc134b53c3005ca9524c587712a000500000004002c80"], 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x8, 0x3, 0x7, 0x7f, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x9042, 0x4, 0x5, 0x1, 0x5, 0x6, 0x100, 0x0, 0x1000, 0x0, 0xffffffffffffffd1}, 0x0, 0x5, r2, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x181400, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x48, 0x5, 0xa5, 0x0, 0x800, 0x80c00, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x1, 0x20}, 0x14, 0x400, 0x10001, 0x1, 0x100000001, 0x3, 0x200, 0x0, 0x400, 0x0, 0x9e7}, r0, 0xffffffffffffffff, r4, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) [ 1479.256446] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1479.274748] ubi0: attaching mtd0 [ 1479.280994] ubi0: scanning is finished [ 1479.347685] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1479.354855] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1479.361400] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1479.369283] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1479.376877] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1479.383104] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:14 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f00000001c0)='bond0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x35, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000200)) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "45e58bf5a7be6161e412b58725"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]]}, 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000884) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r8, 0x40046f41, 0x76006e) [ 1479.391751] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1479.401615] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1479.411810] ubi0: background thread "ubi_bgt0d" started, PID 27594 [ 1479.414856] ubi: mtd0 is already attached to ubi0 [ 1479.423090] ubi: mtd0 is already attached to ubi0 [ 1479.429566] ubi: mtd0 is already attached to ubi0 [ 1479.437178] ubi: mtd0 is already attached to ubi0 07:55:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet(0x2, 0x800, 0x4) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x200, 0x8e5f) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 07:55:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e21, @private=0xa010102}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}, 'gre0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="04002bbd700300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = epoll_create1(0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x30000004}) r6 = dup(r3) epoll_pwait(r6, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) getdents(r6, &(0x7f0000000140)=""/123, 0x7b) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) [ 1479.456583] ubi: mtd0 is already attached to ubi0 [ 1479.462238] ubi0: detaching mtd0 [ 1479.474799] ubi0: mtd0 is detached [ 1479.489824] ubi0: attaching mtd0 [ 1479.494014] ubi0: scanning is finished [ 1479.556527] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1479.570071] ubi0: attaching mtd0 [ 1479.575384] ubi0: scanning is finished 07:55:14 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000900)={&(0x7f0000000400)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000700)=""/19, 0x13}], 0x4}, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000940), &(0x7f0000000980)=0xc) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x10400, 0x108) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000228bd7000fcdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="48550adf997cf712"], 0x3c}, 0x1, 0x0, 0x0, 0x20000003}, 0x4) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)={0xa0, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x32, 0xb, 0x40}, {0x6, 0x11, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x80}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x2004004) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x260000, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x301000, 0xe3) 07:55:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000200)={0x134, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x74, 0x2a, [@tim={0x5, 0x3e, {0x4, 0xbe, 0x2, "a757bc8d7058568431636b44a6e0ad251e42fbfd48d126e3cb716a571e71b908e46028b06c246310cc6cbe4ae1e1495c0e2133329240dbcbc80ef3"}}, @chsw_timing={0x68, 0x4, {0x0, 0x1}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @tim={0x5, 0x13, {0x0, 0xa6, 0x7, "42d84f71bf25dd555dcd48bafc6a28ec"}}, @ssid={0x0, 0x6, @default_ap_ssid}, @channel_switch={0x25, 0x3, {0x1, 0x64, 0x8}}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xff}]}]}, 0x134}}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:14 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/2, 0x2}], 0x1, 0x2, 0x401) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000500), 0x1, &(0x7f0000002880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@aname={'aname', 0x3d, 'wlan0\x00'}}, {@msize={'msize', 0x3d, 0x100000000}}, {@version_u}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptmx\x00'}}]}}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r3) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) preadv(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/180, 0xb4}, {&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000640)=""/229, 0xe5}], 0x4, 0x1, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1479.658950] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1479.671864] ubi0: attaching mtd0 [ 1479.679970] ubi0: scanning is finished [ 1479.750612] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1479.760176] ubi0: attaching mtd0 [ 1479.771953] ubi0: scanning is finished [ 1479.822154] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1479.829415] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1479.838144] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1479.845141] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1479.851928] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1479.858532] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:14 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e21, @private=0xa010102}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}, 'gre0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="04002bbd700300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = epoll_create1(0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x30000004}) r6 = dup(r3) epoll_pwait(r6, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) getdents(r6, &(0x7f0000000140)=""/123, 0x7b) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) 07:55:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1479.866658] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1479.876230] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1479.885684] ubi0: background thread "ubi_bgt0d" started, PID 27647 [ 1479.892083] ubi: mtd0 is already attached to ubi0 [ 1479.899856] ubi0: detaching mtd0 [ 1479.908487] ubi0: mtd0 is detached [ 1479.912812] ubi0: attaching mtd0 [ 1479.969865] ubi0: scanning is finished [ 1480.035641] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1480.042529] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1480.050135] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1480.056929] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1480.063635] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1480.070403] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x977, 0x0, 0x2012, 0x8000, 0xfffff800, 0x7, 0x7}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet(0x2, 0x800, 0x4) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x200, 0x8e5f) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r8, 0x40046f41, 0x76006e) [ 1480.078503] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1480.089135] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1480.099417] ubi0: background thread "ubi_bgt0d" started, PID 27663 [ 1480.100032] ubi0: detaching mtd0 [ 1480.111840] ubi0: mtd0 is detached [ 1480.116706] ubi0: attaching mtd0 [ 1480.139687] ubi0: scanning is finished [ 1480.174357] vhci_hcd: vhci_device speed not set [ 1480.234283] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1480.241203] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1480.248519] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1480.255351] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1480.262260] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1480.269307] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:15 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) signalfd(r1, &(0x7f0000000040)={[0x2]}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_mount_image$ocfs2(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000a00)=[{&(0x7f0000000140)="c636b8e0630d9cf1f7430246711d0307d4cf61fe4227c4734856e141c85eb9973aee1db30a9484a77f11894506b33598cd11faa5475fe4d1d2fce3e09aaf329d7aab8e51ab6ddf7f7f6693957921176229e8b724921053a943c0c51179326d8cb0efd09271a21bad8119d35b951fa9c09e80a9ae", 0x74, 0xfffffffffffffff9}, {&(0x7f0000000380)="acd263858ec4650bdf5c3c78a1d1096a9ee938c3f098622069c3d08aabf85be203bb7f8b453f747318f0d71c396b7b1fbedccf0b9f7a110bddb7688cc82ce51d60b931599fae75fc7f176a359fb790308e6d4fa6da241a272c8b1778109716119c773dddefcef1f54998c808355898f83791e36f5101f4ec45064172326f9fe33bd4b40d6e55d7e2e62f72a1487f3238e3bf032b88e4a7e0d0ea1d1fd31b6f3e9a6e02f0e38504dcad9230043a89d467684f7d7e38588a42173c9eb084b0be1242a505dfcc6c0468178126a5c301bfb2e872be14302fff53fd", 0xd9, 0x568}, {&(0x7f0000000500)="78b6305221c4f7441e6f8766c8a1b3114b035a1aa902daead17a2acb7b848ee54e97c59b8d29596d4960cc081ef269ee327343c996128e325a392accdda4ee3c6169dff459cdec1478a745fa6a6fd44609a7f4b4f1ca312ee18e15c3c576e43fb32a9a2611611badbd69299fe8def566fe5c975526f7728c70ffa55b978d41f131a72c5efa", 0x85}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="37dad48e6fc796b97c0bec18096830ff4a515dea4e582e1dab184426da80b0b14289a2061f", 0x25}, {&(0x7f0000000280)="19822ee8d25dd18cedd05e0ef87fb1ce85c8045afa0e", 0x16, 0x7fff}, {&(0x7f00000002c0)="5eb84a5dddd264429eb816d805dbae60e7a0790b347fd639356c29cb", 0x1c, 0x80000000}, {&(0x7f0000000640)="62619a92378a7f303be8ca765a4817", 0xf, 0x1}, {&(0x7f0000000900)="2e265a4a4b39210d243d87826ae2046fd12fb926b35f926ae2ec0e2b404544aca3ce250769dd02947404f10eb2c0ccbf45ffbc51654a20048669219558396c57739cdd61f7f877872693e6dfaffb627159e41fa4dd33d349de0f6090c46475024cba427af5c2c1a2358233ea2d42080ff981c504e2ca0a4cc8bdcda7eea183426715d39fdbbe6acd3e27b1f1c8db42b67759dbf8b883793cdd01b9eab37b3d4b7d644a9ec689f5ac3159f4d8a5d74d1a6fee9383f13d9c55145d75499d84e670ab70bd8fbe54baf9", 0xc8, 0x6dd2}], 0x102000, &(0x7f0000000680)={[{'\x02\x02\x02\x02\x02\x02'}, {'\x02\x02\x02\x02\x02\x02'}, {}, {'*^~\x04]#(^[\xa9'}, {'/dev/ubi_ctrl\x00'}, {'wlan0\x00'}], [{@hash}, {@fowner_lt}]}) splice(r5, &(0x7f0000000700)=0x100, 0xffffffffffffffff, &(0x7f0000000b00)=0xfffffffffffffffc, 0xfffffffffffffffd, 0x6) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1480.277181] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1480.286761] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1480.296393] ubi0: background thread "ubi_bgt0d" started, PID 27674 [ 1480.302879] ubi: mtd0 is already attached to ubi0 [ 1480.309134] ubi: mtd0 is already attached to ubi0 [ 1480.314055] ubi: mtd0 is already attached to ubi0 [ 1480.319342] ubi0: detaching mtd0 [ 1480.324383] ubi0: mtd0 is detached [ 1480.328909] ubi0: attaching mtd0 [ 1480.357248] ubi0: scanning is finished [ 1480.420726] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1480.428058] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1480.435913] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1480.442220] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1480.449620] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1480.456509] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r4, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x1ac, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x174, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "03bc7104604296c437bf74ea3737637d4d8b31bb845b365256419c267e3fbf09"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "87195b7ef368b76c7691e1c8e9ed6da56a2460c3104768354662b8098d172260"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ccce19cb68a276a253c015df4f682465c2f7f2f579bb82f7774b26e84f9771de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1a}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "316800446f9d9d30321046d7f2cb9049"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x404c014}, 0x20040820) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) [ 1480.463851] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1480.473604] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1480.483636] ubi0: background thread "ubi_bgt0d" started, PID 27686 [ 1480.483675] ubi0: detaching mtd0 [ 1480.505970] ubi0: mtd0 is detached [ 1480.512049] ubi0: attaching mtd0 [ 1480.543138] ubi0: scanning is finished [ 1480.593489] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1480.601165] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1480.608332] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1480.614880] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1480.621719] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1480.628575] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:15 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x101040, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') poll(&(0x7f00000000c0)=[{r1, 0x1002}, {r0, 0x4}, {r0, 0x60}, {r0, 0x80}, {r0, 0x401}, {r0, 0x200}, {r2, 0x100}], 0x7, 0x24b5) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x550000) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1480.636245] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1480.645943] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1480.655929] ubi0: background thread "ubi_bgt0d" started, PID 27698 [ 1480.656552] ubi0: detaching mtd0 [ 1480.667323] ubi0: mtd0 is detached [ 1480.672983] ubi0: attaching mtd0 [ 1480.680351] ubi0: scanning is finished 07:55:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001840)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000240)=""/121, 0x79}, {&(0x7f00000002c0)=""/245, 0xf5}, {&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000001640)=""/216, 0xd8}, {&(0x7f0000001740)=""/195, 0xc3}, {&(0x7f0000000500)=""/7, 0x7}, {&(0x7f0000000540)=""/56, 0x38}], 0x9, 0x20, 0x5) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e9072312c5db94e35200b1a8e5cc4396decbff17e1f0e5a8811ba6956776f139ff908aef63cd2683f7752f75a36640224e6b33b6c659cc86da2521385aab0f6ea7e416fb8b2f81ea2120de5eb8decf62e3", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="39002a0005281f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd710700000401000000020000000010002d800a000000020202020202000092002a006b8c13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2000004002c80"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = perf_event_open(&(0x7f000001d000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28ee2060cf5a2acc, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x400, 0x3, 0xfffffffffffffffc, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = dup3(r2, r4, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000580)={0x2d, 0x101, 0x7, 0xfffffffe, 0x79bcfd63}, 0x14) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1480.717816] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1480.727447] ubi0: attaching mtd0 [ 1480.731732] ubi0: scanning is finished 07:55:15 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000940)=[{&(0x7f00000000c0)=""/186, 0xba}, {&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f0000000840)=""/231, 0xe7}, {&(0x7f0000000500)=""/163, 0xa3}], 0x8, 0x6, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = dup3(r0, r0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000000)={@any, 0x7427}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1480.781406] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1480.790461] ubi0: attaching mtd0 [ 1480.818653] ubi0: scanning is finished [ 1480.874353] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1480.881349] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1480.889405] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1480.896523] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1480.903224] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1480.910472] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:15 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="240100008b8349393a53de05837188ff7c02c1aa504a804abc89a219781bc0431c9d739abf819e8363a536d4dfa16124fac4d2f2da1b76ce82d52131b0b5c4ba2428c88723ca8ad5568e1a6fe13f91e3bc70b4b6a4c8051731174b740e07ffff8df6065c220a8bafb1a897cc43d78e", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1480.918522] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1480.928831] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1480.938757] ubi0: background thread "ubi_bgt0d" started, PID 27724 [ 1480.938840] ubi0: detaching mtd0 [ 1480.951261] ubi0: mtd0 is detached [ 1480.962885] ubi0: attaching mtd0 [ 1480.987109] ubi0: scanning is finished [ 1481.047220] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1481.059141] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1481.069567] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1481.077438] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1481.084855] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1481.091101] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1481.099673] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1481.109748] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1481.120338] ubi0: background thread "ubi_bgt0d" started, PID 27737 [ 1481.120418] ubi0: detaching mtd0 [ 1481.132417] ubi0: mtd0 is detached [ 1481.137054] ubi0: attaching mtd0 07:55:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r4, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x1ac, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x174, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "03bc7104604296c437bf74ea3737637d4d8b31bb845b365256419c267e3fbf09"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "87195b7ef368b76c7691e1c8e9ed6da56a2460c3104768354662b8098d172260"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ccce19cb68a276a253c015df4f682465c2f7f2f579bb82f7774b26e84f9771de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1a}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "316800446f9d9d30321046d7f2cb9049"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x404c014}, 0x20040820) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) [ 1481.159572] ubi0: scanning is finished [ 1481.233945] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1481.240989] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1481.248503] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1481.255798] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1481.262651] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1481.269583] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1481.277512] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1481.287964] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1481.297910] ubi0: background thread "ubi_bgt0d" started, PID 27746 [ 1481.304556] ubi: mtd0 is already attached to ubi0 [ 1481.309657] ubi: mtd0 is already attached to ubi0 [ 1481.315623] ubi: mtd0 is already attached to ubi0 [ 1481.320611] ubi0: detaching mtd0 [ 1481.330313] ubi0: mtd0 is detached 07:55:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:16 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x1574, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1416, 0x1e}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0xe9, 0xfa, "d69578829807f1c52e9986a5c10356fefdf7af1199d8840ba6023a82ad3aa42d4faf7185c3139c07d75da823faa6444a9bfc6f4b8c79f3a0d81eeed7b4748cd67b3d8422022500616305af333c1e2b8327bb5763073a35c74df97361ace37410eac5302edcb98ffea86a39317f5798bdeb6c14e6e59dd73442b9b9626ac8cedc390aa918162d927ec326690c54677616fafae56a7dbb3d6af8516672ae4882aa8a2ee9265d9cf2b78ea369b3922499c57b2a80f7731f21fcb139406576d3c915da2fa7f822e2d67bf457f89647f9cd6bdb6839cb6a34aa5390bd484dbf7a8b49a111ecca3d"}, @NL80211_ATTR_FILS_ERP_RRK={0x2c, 0xfc, "49912c06efb2144a3403b47b433660d93b7f6bdcdc75af1af60c811e345307fbddb6c2de1d891680"}, @NL80211_ATTR_FILS_ERP_REALM={0xdd, 0xfa, "617d04afcc85408402933dbad6f0c87e8697ff610d89de1b963752ce6163a157d4f19300cbb0cb622ddb79cb86e7b79be0331df2ecc7cf72586e264624b262144d919bf2fa935defbbc226372b9fb4aef3560ce837b22ab17f0c47a7673cd8868c519a3602c821bc676ed69136e8577fff42947be3e48e1f55a71db3d5ae310226cca0e13309d73af4beb75c58edb48359753c252ae4b23533877561bb6bb08510788be543d95e809f53487f97e9abd107c75bd458125bf997a05baec6abdc93266e440b5601cd6b685e40278c3f36024166df1a0252193db4"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "8bf0123d6c"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "3ec253f8"}, @NL80211_ATTR_FILS_ERP_REALM={0xd8, 0xfa, "e4ebd0a26403f410dbe4079ba99caf9e6e9a9cbe18b05b076edb53b6b63b1fa6b253e86732d8bdcfa79d2d0725b9c82ab956e012c2e6c193f9a00b8ffe2824994eb846e12891342ddb1f78c419fe97af227433442f848f8ad05e0bbdc2e350dea351fbae7d54913c346077e999416b86ea0c17cba5d5e18c2f25feeff5bbe05389556152e405f329d8b64c4fe49b0d3e0ff45c415d6c0e14d7e887fe1a4271885eb47b1ff0a2af8bc56be1a714961651346feb258643233c36c4d9fdd0cdc21e54569b38ef17792c5428482515edf2df39d5effa"}, @NL80211_ATTR_FILS_ERP_RRK={0x6d, 0xfc, "41f0e2b708d6e0b15aa27781babf5e3a23d28c5858d70ee19f99eaedb6e32f408bf02d4059de9422bd793c363333444256abfc3f46b3df0b5ab27484bbb706897b6465d5e7cc24a630fb5b20e5adff83019aa7bee3037163ab29debe1603407cc5bfec61fc6c8ffcfd"}, @NL80211_ATTR_FILS_ERP_RRK={0x25, 0xfc, "1f6638d518ea4e8d531e654fb3e5b3c40e602f3d6bade5754567584c409b6727a3"}], @NL80211_ATTR_IE={0x1cb, 0x2a, [@random={0x1, 0xd7, "5e40914db54384042b65873a8cc6f5de3b063118a809e91dd4a9886f435a95f1e51e2a9de78923fcaeaca92b7e5e789a71e149b41ad35fc39190e67aad54f06b9b720451441aa4baca5bf9e8a6665f72bc472c76ba6761fbccaec96f8ada1f65d6571ea6a175c397788c4dde4699041c834b98dede67986dd387bf7175b87ee2e3a8bf8636a543ff4413a0e3013d6d32af51cbfac8e96ba756f070f2ccdec7a453479d9e8b49cba5999fdb839b554995b120e9fda2786aa5c3ea5134c3f735f087b81d1f3e52c5fbc05d4296bd4c3ee798622e568b2286"}, @cf={0x4, 0x6, {0x80, 0xff, 0x6, 0x81}}, @tim={0x5, 0xe1, {0x39, 0x54, 0x1, "5e9a0ef275a3fef0251dcd7511fb6e98736f0cafbd814599fc738889d8dc11c116d02d836c8df06a97d48fc3cc0597efb6e620d21e22dfed5a03ee026bd0ec0677fd233e66e38c94f802e52c9ffceaedea85862ba5d773c58d7b48eca2e1461b6c7548b585210f1b548fce493d8ca46e8a3d8301a76de88e3bb3a719f46bd296f820d821cb8803de62186809a74f8a669bccbb9534b4ffc6694561a969732bc9ca96ab8afbac8ba9e1e457f4f97c90c3b3783babdf6f8fd51ad625c5ff1a62dae05a8040857545f3ab45b1f44ec2dbefac97ab9c0aa2fcdc80aa032217d8"}}, @challenge={0x10, 0x1, 0x37}]}]}, 0x1574}, 0x1, 0x0, 0x0, 0xc090}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1481.337063] ubi0: attaching mtd0 [ 1481.379977] ubi0: scanning is finished 07:55:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500000000000000000006000000080003000401f4b16c8c1ec9e2d267848374b2baf100c3fda7af4b36bd72c8ae6ae46d246a6147d0b2ec462b5af944c406289bb63205e3f2028ad21052db669b7b9b1fdfedc23854941c749946159f7ff5600c06ec1a40e78a0c3ad2622cefc9d4ae030b7584cf62d603d78dfde49079c756b976d0c5bdc8e50be249271afb94a5a4551ae8ece3821cfdc38fd7210f820000cdb55adfd4268460c89ce159678d5fa95514bc72c9632a00d051124acc78a22ce0bc3c0674212b1a4d5a508c0ee8c7d50c4fea3d76e4d3f93e9da9aa0d", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x128, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3d, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @channel_switch={0x25, 0x3, {0x1, 0xb8, 0x2}}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000055) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000640)=""/203, 0xcb}], 0x2, 0x40, 0x1) 07:55:16 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x114, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_IE={0x44, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x3, 0x0, 0x4, 0x1}}, @ssid={0x0, 0xb, @random="65127cffe4cf6d1ac414b7"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6b99a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000080)={0x17e}) rename(&(0x7f0000000240)='./file0\x00', &(0x7f00000007c0)='./bus\x00') r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f00000000c0)="8d6f8ce2bdef267873e30587271ebf61052ca520bc5c7e3b1acc673b70328ed7f53495a6a76c55df9d39523d21538ccfbfdbf8e89a5b3c9f1ef6b83d6fbbe90cf677b64d28ed6c45c423578278186bd62e87abda3c1dc9a2db10fba9da145c708dff9a4c880eee3b69a4798c82950cef2ebc4025", 0x74}], 0x2, 0xa) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f0000000040)='./file0\x00', 0x0, r5, 0x800) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1481.473071] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1481.482157] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1481.492400] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1481.500138] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1481.508793] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1481.516495] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1481.525094] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1481.535084] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1481.546145] ubi0: detaching mtd0 [ 1481.548365] ubi0: background thread "ubi_bgt0d" started, PID 27766 [ 1481.565394] ubi0: mtd0 is detached [ 1481.569199] ubi0: attaching mtd0 07:55:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r4, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x1ac, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x174, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "03bc7104604296c437bf74ea3737637d4d8b31bb845b365256419c267e3fbf09"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "87195b7ef368b76c7691e1c8e9ed6da56a2460c3104768354662b8098d172260"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ccce19cb68a276a253c015df4f682465c2f7f2f579bb82f7774b26e84f9771de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1a}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "316800446f9d9d30321046d7f2cb9049"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x404c014}, 0x20040820) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) [ 1481.573453] ubi0: scanning is finished 07:55:16 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000063a000/0x2000)=nil, 0x2000, 0x1800003, 0x12, r0, 0xffffc000) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1481.625994] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1481.638694] ubi0: attaching mtd0 [ 1481.643041] ubi0: scanning is finished 07:55:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='bond0\x00') socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x550000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) [ 1481.692835] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1481.702888] ubi0: attaching mtd0 [ 1481.720869] ubi0: scanning is finished [ 1481.782666] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1481.790133] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1481.797957] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1481.805428] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1481.812220] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1481.819287] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x411, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x68, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xb967f7af3acad203}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000000}, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x550000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) [ 1481.828060] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1481.838252] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1481.848443] ubi0: background thread "ubi_bgt0d" started, PID 27796 [ 1481.854745] ubi: mtd0 is already attached to ubi0 [ 1481.858364] ubi0: detaching mtd0 [ 1481.865440] ubi0: mtd0 is detached [ 1481.869374] ubi0: attaching mtd0 [ 1481.911724] ubi0: scanning is finished [ 1481.968458] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1481.975531] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1481.982095] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1481.989536] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1481.996721] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1482.002827] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1482.010371] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1482.020138] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1482.029957] ubi0: background thread "ubi_bgt0d" started, PID 27807 [ 1482.030801] ubi: mtd0 is already attached to ubi0 [ 1482.042259] ubi: mtd0 is already attached to ubi0 [ 1482.048250] ubi0: detaching mtd0 [ 1482.053899] ubi0: mtd0 is detached [ 1482.058169] ubi0: attaching mtd0 07:55:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r4, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x1ac, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x174, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "03bc7104604296c437bf74ea3737637d4d8b31bb845b365256419c267e3fbf09"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "87195b7ef368b76c7691e1c8e9ed6da56a2460c3104768354662b8098d172260"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ccce19cb68a276a253c015df4f682465c2f7f2f579bb82f7774b26e84f9771de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1a}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "316800446f9d9d30321046d7f2cb9049"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x404c014}, 0x20040820) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 07:55:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500000000000000000006000000080003000401f4b16c8c1ec9e2d267848374b2baf100c3fda7af4b36bd72c8ae6ae46d246a6147d0b2ec462b5af944c406289bb63205e3f2028ad21052db669b7b9b1fdfedc23854941c749946159f7ff5600c06ec1a40e78a0c3ad2622cefc9d4ae030b7584cf62d603d78dfde49079c756b976d0c5bdc8e50be249271afb94a5a4551ae8ece3821cfdc38fd7210f820000cdb55adfd4268460c89ce159678d5fa95514bc72c9632a00d051124acc78a22ce0bc3c0674212b1a4d5a508c0ee8c7d50c4fea3d76e4d3f93e9da9aa0d", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x128, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3d, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @channel_switch={0x25, 0x3, {0x1, 0xb8, 0x2}}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000055) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000640)=""/203, 0xcb}], 0x2, 0x40, 0x1) [ 1482.081303] ubi0: scanning is finished 07:55:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='bond0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x1dc) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x125000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xff, 0x90, 0x6, 0x3, 0x0, 0x1, 0x46000, 0xf, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd109, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x6a5, 0x3, 0x3, 0x8, 0x1d5, 0x3f, 0x0, 0xffff, 0x0, 0x7}, 0x0, 0x9, r2, 0xc) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) clock_gettime(0x0, &(0x7f0000004280)={0x0, 0x0}) recvmmsg(r3, &(0x7f00000041c0)=[{{&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)=""/67, 0x43}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/109, 0x6d}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000001640)=""/202, 0xca}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/206, 0xce}], 0x7, &(0x7f0000002840)=""/192, 0xc0}, 0x5}, {{&(0x7f0000002900)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000002980)=""/234, 0xea}], 0x1, &(0x7f0000002a80)=""/166, 0xa6}, 0x2}, {{&(0x7f0000002b40)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000004000)=[{&(0x7f0000002bc0)=""/235, 0xeb}, {&(0x7f0000002cc0)}, {&(0x7f0000002d00)=""/5, 0x5}, {&(0x7f0000002d40)=""/237, 0xed}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/87, 0x57}, {&(0x7f0000003ec0)=""/47, 0x2f}, {&(0x7f0000003f00)=""/5, 0x5}, {&(0x7f0000003f40)=""/155, 0x9b}], 0x9, &(0x7f00000040c0)=""/247, 0xf7}, 0x81}], 0x3, 0x61, &(0x7f00000042c0)={r4, r5+10000000}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r6, 0x8004500b, &(0x7f0000000280)=0x8) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1482.181408] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1482.188731] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1482.195818] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1482.202166] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1482.209604] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1482.216133] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x202a00, 0x0) write$P9_RRENAME(r3, &(0x7f00000000c0)={0x7, 0x15, 0x1}, 0x7) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1482.223565] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1482.234304] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1482.243739] ubi0: background thread "ubi_bgt0d" started, PID 27825 [ 1482.252787] ubi: mtd0 is already attached to ubi0 [ 1482.258920] ubi: mtd0 is already attached to ubi0 [ 1482.273986] ubi0: detaching mtd0 [ 1482.280333] ubi0: mtd0 is detached [ 1482.287882] ubi0: attaching mtd0 [ 1482.293209] ubi0: scanning is finished 07:55:17 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)={0xec, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) getdents(r5, &(0x7f0000000380)=""/172, 0xac) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)={0x1608, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x400, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xec, 0x0, "1d37d6069e661339a33bd3a28a12d3e061d5e2a3cec681bf19634a8b638b8629e8d70608059be3ba603e5bf490002260570a2491ea5590d654e9e5872266ce75faa8b3f2bd5a3d69b82576923fe96d5a2cf5e2249de69ea29a3f5415a98cc148b9ccb43cfc7c896298a99bf4d77e6211f91e8e78fda0b3266bc94db9d94a15aea9e3ab368192391836b5e90f4218a8182dd3cd09e8a20a5c1bcab3ef2eb81a0fee2842d4e4f55b75030cd811b69d633b832b666892c381ef55a0475387cbbabd6821f3a5e8cc9d714ff7f3fa905d345306e1ac18105ee981077b80b4f4d0c1198b4b250bc9f6478e"}, @NL80211_BAND_60GHZ={0xed, 0x2, "944073934bcb483ca0dc3cd8eb0363a3899d3c0ae669398273f6478c19a45a5f53ed3ff92532d3148b814cb23ac334ae92fc4aca1c26f1165647b9a761e15efb333cd90bffec12f1fb9349a34e3e5753fb3b82ab03a366353d179463c8bbe1fc05d4208c6a3ddb56c9727d7a347abac541661adfd50edecd6dc4624fd47fac41b6c78f060828f67a4f0778aa1f79b7a0b9c0672f4ed43d2f4d3820870340d3b774cb0554590120033f63bea6bd1fa654460df1a166aafc2c845c2be9645595f04368b30aea5e1abcc9569ad2e11e142ce08e795424003779d13cac12eac94d3a44241e9f53bfb99a7e"}, @NL80211_BAND_6GHZ={0xad, 0x3, "80805433fe64a4d1ef578c82709ff409499567730c54b0555cf01fcc8391bf2bfa948e00dc8da224012017c7848626efe51ea795616f93d12f31b30babb942059674e146dd55caea0d8f1a647a3b325e64fc6c46006e9ba6cbc098a8226084bfe392d1e31a384e015686894fb80eef057eb89b38bd60b17ef6bd60ec767b6bf496e4230cf69209a4ee8f6dae501dbe8d8da6a23cfc82a4d5608d8628adda380a336b9e9f960e0dc3d9"}, @NL80211_BAND_6GHZ={0xb3, 0x3, "79da0011cb8cc03929cd06a121050e25a7a12c6e73b847175b5d6cf7883539fd0913ae7303d4c503909acf1e9b80ff0de15638fc356747e6daa41f62ff36c6b99d773ddaad07cd22a1eba03c06facbc31463e9ed08c9d6d452f3b3b5b967082ed55199ae2700084d47db4c7356365fceac23598490b5e139a5b1d1f42ba495485c8e3618ba66442065a5f076b70fd80df1aaa287c88906585f6fa180abfea54a9f39ea7bc2f3f66529d38f9696e42f"}, @NL80211_BAND_60GHZ={0xbb, 0x2, "6b0b3891ee59d7126d8cd86e542406652fe6818aa232c2613bbc71938f1cf4a61e279934f2ec05ed061bd5cb4784241c3229651d2f6fdb1fe814526d1f8af16c592373ba2ba7472d898f39343d6f45aa9e8221febf6d7e539412f603751583bccf2f266f67e59a04eac1f022ad764dfadef6226d25d0ea72bdb0f3c34a7ac952d8e3a4d1fe5f326e70ffac4f981ec7033d903d6129ac980d1eaf7e595637a509fbdb0a52ee23c0c40a3b9f7b882eee4261caf6d8915671"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc, 0x1}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x40}, @NL80211_ATTR_SCAN_SUPP_RATES={0x11b4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa6, 0x1, "d8254835cfc0271c48bff2de73207996bc4fca1f8e1d792797c7548060120735d938799988f1950c1b6195820e255ba42db7d203e324e2f3d10a82abbafa47e761ab56b137b15516b2f8c966a6f8b0a649206c4028ca0271fc1373ad49d3565b1b73b66a8cd0f1dbf4ca3e7ac34f698e0d4f1cc60f535fe2ed84778448bc3762831875bb114e411d81ae1c2dc8d2118056b58606d082448ce79a10fd927f3b8f7b3d"}, @NL80211_BAND_6GHZ={0xd8, 0x3, "7cb9045f8488df49a809e0ba36be5d114b541796d9f26bacce29585a680232ca3505d8589045c6d22fe241a8f6a2a7897926544488dfa7957491c2308f625f14923c9f49ead3f75bc86d4bf7edc274d660eea115d107a38dc66021b217cab63a0208683a73e9975465ec893123d789fdf09bb3a5942d8882c491a164cdb51e8274dea3a0f3b7486603865cd21d18a77745c112677739caf0ec8a46081b9d8a271336b0722171091ff55256f939ff3a5b6e11676ae651f756f0e85a56bbebbdf8d725e60343e0b8858b1e9334f2443cfc1486b898"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_5GHZ={0x2a, 0x1, "4da6d646bc18479c9e710ea491782177581f7806b9dd2587fe3daa1a192db708894791f56037"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x20}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_SSIDS={0x14, 0x2d, 0x0, 0x1, [{0x10, 0x0, @random="ffd3e8efc630ab53adaf7e88"}]}]}, 0x1608}, 0x1, 0x0, 0x0, 0x840}, 0xc800) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1482.330276] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1482.340184] ubi0: attaching mtd0 [ 1482.349540] ubi0: scanning is finished [ 1482.421430] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1482.431477] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1482.439444] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1482.446380] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1482.453141] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1482.460404] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r4, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x1ac, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x174, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "03bc7104604296c437bf74ea3737637d4d8b31bb845b365256419c267e3fbf09"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "87195b7ef368b76c7691e1c8e9ed6da56a2460c3104768354662b8098d172260"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ccce19cb68a276a253c015df4f682465c2f7f2f579bb82f7774b26e84f9771de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1a}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "316800446f9d9d30321046d7f2cb9049"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x404c014}, 0x20040820) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) 07:55:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r4, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x1ac, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x174, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "03bc7104604296c437bf74ea3737637d4d8b31bb845b365256419c267e3fbf09"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "87195b7ef368b76c7691e1c8e9ed6da56a2460c3104768354662b8098d172260"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ccce19cb68a276a253c015df4f682465c2f7f2f579bb82f7774b26e84f9771de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1a}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "316800446f9d9d30321046d7f2cb9049"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x404c014}, 0x20040820) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 1482.468495] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1482.478251] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1482.487987] ubi0: background thread "ubi_bgt0d" started, PID 27846 [ 1482.493518] ubi: mtd0 is already attached to ubi0 [ 1482.501496] ubi: mtd0 is already attached to ubi0 [ 1482.506559] ubi: mtd0 is already attached to ubi0 [ 1482.511667] ubi: mtd0 is already attached to ubi0 [ 1482.517397] ubi0: detaching mtd0 [ 1482.532807] ubi0: mtd0 is detached 07:55:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x4000010, r1, 0x1f4c5000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f00000000c0), 0x2, 0x1) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1482.555134] ubi0: attaching mtd0 07:55:17 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000001", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x4}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="e2f206b48566a161226786df73c8cc933f34bc65971a384d1b4affbae3730ae9a86c92267d2abd494b10a9aa0f730f1d706cd25d77ac8cdd47a11dc9253a228580457b7f34becec75915846fe55edf9ad79d9e28eb4ee38c112a49df7e8b137a5a67eac1916cff00f4a36b2d9297910d3778a3b92e874d18c9fb", 0x7a}], 0x1}, 0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendfile(r3, r0, &(0x7f0000000280)=0x3ff, 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1482.578429] ubi0: scanning is finished [ 1482.659577] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1482.670486] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1482.679600] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1482.686663] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1482.693404] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1482.700553] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r4, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x1ac, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x174, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "03bc7104604296c437bf74ea3737637d4d8b31bb845b365256419c267e3fbf09"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "87195b7ef368b76c7691e1c8e9ed6da56a2460c3104768354662b8098d172260"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ccce19cb68a276a253c015df4f682465c2f7f2f579bb82f7774b26e84f9771de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1a}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "316800446f9d9d30321046d7f2cb9049"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x404c014}, 0x20040820) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 1482.709067] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1482.718970] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1482.729485] ubi0: background thread "ubi_bgt0d" started, PID 27866 [ 1482.729646] ubi: mtd0 is already attached to ubi0 [ 1482.741751] ubi: mtd0 is already attached to ubi0 [ 1482.749467] ubi: mtd0 is already attached to ubi0 07:55:17 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r4, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x1ac, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x174, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "03bc7104604296c437bf74ea3737637d4d8b31bb845b365256419c267e3fbf09"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "87195b7ef368b76c7691e1c8e9ed6da56a2460c3104768354662b8098d172260"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ccce19cb68a276a253c015df4f682465c2f7f2f579bb82f7774b26e84f9771de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1a}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "316800446f9d9d30321046d7f2cb9049"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x404c014}, 0x20040820) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 1482.765293] ubi0: detaching mtd0 [ 1482.773515] ubi0: mtd0 is detached [ 1482.781082] ubi0: attaching mtd0 07:55:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r4, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x1ac, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x174, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "03bc7104604296c437bf74ea3737637d4d8b31bb845b365256419c267e3fbf09"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "87195b7ef368b76c7691e1c8e9ed6da56a2460c3104768354662b8098d172260"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ccce19cb68a276a253c015df4f682465c2f7f2f579bb82f7774b26e84f9771de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1a}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "316800446f9d9d30321046d7f2cb9049"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x404c014}, 0x20040820) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1482.826895] ubi0: scanning is finished 07:55:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r4, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x1ac, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x174, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "03bc7104604296c437bf74ea3737637d4d8b31bb845b365256419c267e3fbf09"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "87195b7ef368b76c7691e1c8e9ed6da56a2460c3104768354662b8098d172260"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ccce19cb68a276a253c015df4f682465c2f7f2f579bb82f7774b26e84f9771de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1a}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "316800446f9d9d30321046d7f2cb9049"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x404c014}, 0x20040820) 07:55:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r3, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r3, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1482.933339] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1482.941712] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1482.948430] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1482.955171] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1482.961899] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1482.969130] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1482.978706] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1482.988932] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1482.999304] ubi0: background thread "ubi_bgt0d" started, PID 27892 [ 1482.999771] ubi: mtd0 is already attached to ubi0 [ 1483.011517] ubi0: detaching mtd0 [ 1483.020381] ubi0: mtd0 is detached [ 1483.026767] ubi0: attaching mtd0 [ 1483.033535] ubi0: scanning is finished 07:55:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r3, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) 07:55:18 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0x100, 0x0, 0x10000, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1483.080486] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1483.091873] ubi0: attaching mtd0 [ 1483.125831] ubi0: scanning is finished [ 1483.199365] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1483.206837] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1483.213455] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1483.220341] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1483.228384] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1483.235180] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1483.242507] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1483.252071] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1483.261583] ubi0: background thread "ubi_bgt0d" started, PID 27917 [ 1483.262616] ubi: mtd0 is already attached to ubi0 [ 1483.276539] ubi0: detaching mtd0 [ 1483.283822] ubi0: mtd0 is detached [ 1483.290664] ubi0: attaching mtd0 [ 1483.295407] ubi0: scanning is finished 07:55:18 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) getsockname$ax25(r0, &(0x7f0000000500)={{0x3, @default}, [@remote, @bcast, @null, @bcast, @bcast, @default, @remote, @rose]}, &(0x7f0000000580)=0x48) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14feffff436d67736e21fe0afd7a8c04f70088d93ca331c0b2109ad71440bb3a075ac93835eb2e81efff4964966f35639974709c1bd35379753aaae2c6e79e26a68add3e80ee80323afa2e7931922c6ec9d7284d6d675c63d3f62bb5b74099f414c8fdeaae623fbb0b38218641ec08ef78b205f24b9ec6877f567f51ad65d6c8477c09", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="0000dc00f808000010002d800a000000020202020202000092002a006b8c13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b740455925c6cf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2000004002c80"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/69, 0x45}, {&(0x7f0000000040)=""/5, 0x5}], 0x2, 0x7ff, 0xe34) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x28000, 0x0) r5 = signalfd(r2, &(0x7f00000001c0)={[0x4d]}, 0x8) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000200)="0fc73d009b0000f30f07f0f7170f011d04000100c4c1095c4a71440f20c03503000000440f22c02ef30f1eceb9800000c00f3235008000000f30b94f0900000f32f3a5", 0x43}], 0x1, 0x0, &(0x7f00000002c0)=[@cr4={0x1, 0x100120}], 0x1) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r3, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:18 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r4, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)={0x1ac, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x174, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "03bc7104604296c437bf74ea3737637d4d8b31bb845b365256419c267e3fbf09"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "87195b7ef368b76c7691e1c8e9ed6da56a2460c3104768354662b8098d172260"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ccce19cb68a276a253c015df4f682465c2f7f2f579bb82f7774b26e84f9771de"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1a}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "316800446f9d9d30321046d7f2cb9049"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x404c014}, 0x20040820) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 1483.332506] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1483.342305] ubi0: attaching mtd0 [ 1483.362799] ubi0: scanning is finished [ 1483.438659] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1483.446390] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1483.453103] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1483.460576] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1483.468182] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1483.475315] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1483.482781] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1483.493278] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1483.503333] ubi0: background thread "ubi_bgt0d" started, PID 27937 [ 1483.503573] ubi: mtd0 is already attached to ubi0 [ 1483.516092] ubi0: detaching mtd0 [ 1483.526316] ubi0: mtd0 is detached [ 1483.542258] ubi0: attaching mtd0 [ 1483.547119] ubi0: scanning is finished 07:55:18 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="08000500020000007fde9e072c5b998e2252a98b9ef8af7754dc1b252a73cb48fa5dde1ba4a4e664d74a32e5a8b0e0c52a1d9b975232a01e71fde841c4bf063b861879f1d47822466fa7973cd97f07aaf4e1b9899b81c3f40dfe4562d485d63eee06a89377bdb4689868cddd48c595dcec9d52c526b1da6c8ac461f13d7c7871825f1947027c02feb57971a7754ddc5d23e08296c868ff944edf217cc4115ed613fe54e3d0bb9a7fddb947c5b6d3fc12851fa840b72ca77cc20bcdc6804f2bde7d1fc5318a51e83ab556a8ce5c5371f9628660365e1182e99a"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:18 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='bond0\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/210, 0xd2}, {&(0x7f0000000000)=""/47, 0x2f}], 0x2, 0xc83, 0xffffffff) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f00000001c0)='bond0\x00') mmap(&(0x7f00007de000/0x1000)=nil, 0x1000, 0x2000007, 0x110, r4, 0xa5bce000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) [ 1483.583867] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1483.596507] ubi0: attaching mtd0 07:55:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1483.627946] ubi0: scanning is finished 07:55:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r2, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r2, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1483.734721] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1483.743581] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1483.754985] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1483.761338] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1483.770372] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1483.778288] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1483.787157] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1483.796956] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1483.806752] ubi0: background thread "ubi_bgt0d" started, PID 27968 [ 1483.807264] ubi: mtd0 is already attached to ubi0 [ 1483.818671] ubi: mtd0 is already attached to ubi0 [ 1483.823672] ubi0: detaching mtd0 [ 1483.830024] ubi0: mtd0 is detached 07:55:18 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x2) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f00000001c0)='bond0\x00') vmsplice(r5, &(0x7f0000000440)=[{&(0x7f0000000100)="c1223c69a698e6d4f4a44ad44c3fc4c4133db723693325883f01738054ea770e82c530c86657abfb80829978c3d3115fda6e9df6e3c0101f3187801450a9e3168376f4106d9d7a2fe3a5bda03c0f6a485785ad63d8ee27a9a4efd683f6cf957b556910a58afda17c0644517236184d6bb4c964c5133ee41975009a2e1fd82d", 0x7f}, {&(0x7f0000000180)="a4762508a4f6f09559d631b25e36697c695a192ec90f7939ec5063613c54f6a5b704f2de8aca5b508dad3a17bd402f54feac7c69193454ee7afae65a087891f1b11cdaa864672a80cd9a3190c7ebe6fcfaf1baacc55ad6da672c1987bb34ec47a44af63a4536b4cf79bbeec8ac4e9d7da4201149949174bb94e9588d8feb907bd4eecc98767b7541c997cd2314367755d216", 0x92}, {&(0x7f0000000380)="a2ec54b4a3fa4f959c2a34c6b3376fc2aedcd7aa3bc16fe722c64b4faa4d06f094f94b226d2cda948a5c36f72c21b99f60ed209d400b8289e40625426e075677469d850a7fb4e88ee8e6676eb59ccdf75bbc3e36b7e2a06787870f38c8c7dfb13cbe4dcc2fc4e2167b949baa212537c3ee4fca342bcdc699049d8c085f1656da4778db655c9a087c55406f999e032e35c8a8300579400d046836361837", 0x9d}, {&(0x7f0000000280)="227093a165154324c09c70ce45292bed8bc250a02f8b32c4913948b0e6f8da0a0d2501a3f7b9fd8cc9c6a586cace353443f8c71cf93327cef116331c5f9c67eaa6", 0x41}], 0x4, 0x8) 07:55:18 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r2, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1483.834779] ubi0: attaching mtd0 [ 1483.879673] ubi0: scanning is finished [ 1483.942281] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1483.950107] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1483.957328] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1483.963644] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1483.971289] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1483.978046] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1483.986165] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1483.995862] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1484.005533] ubi0: background thread "ubi_bgt0d" started, PID 27985 [ 1484.006423] ubi: mtd0 is already attached to ubi0 [ 1484.017460] ubi0: detaching mtd0 [ 1484.023778] ubi0: mtd0 is detached [ 1484.033576] ubi0: attaching mtd0 [ 1484.044588] ubi0: scanning is finished 07:55:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x46, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @peer_mgmt={0x75, 0x14, {0x0, 0x54, @void, @void, @val="732753cf30139a8f6b1aba1326a5b375"}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x519d42, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r3, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='bond0\x00') socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x550000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) [ 1484.082462] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1484.093419] ubi0: attaching mtd0 [ 1484.101840] ubi0: scanning is finished [ 1484.180547] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1484.188821] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1484.196423] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1484.202906] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1484.212197] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1484.219176] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1484.229002] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1484.239188] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1484.249204] ubi0: background thread "ubi_bgt0d" started, PID 28006 [ 1484.252606] ubi0: detaching mtd0 [ 1484.263368] ubi0: mtd0 is detached [ 1484.268756] ubi0: attaching mtd0 [ 1484.273346] ubi0: scanning is finished 07:55:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x94, 0x0, &(0x7f0000000380)=[@clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/190, 0xbe}, @flat=@handle={0x73682a85, 0x1901}, @fda={0x66646185, 0x7, 0x1, 0x21}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}, 0x40}, @clear_death, @free_buffer, @enter_looper, @increfs={0x40046304, 0x3}, @clear_death={0x400c630f, 0x2}], 0x48, 0x0, &(0x7f0000000280)="861989f367239cfb78f171340c62fb0c37c53c59dddad82413dc7547049516d98c17622aa56f6e1dcfbc049b622c287fb5cc65ec6e921997186c39be2f44793c6c7c77e8888d36e6"}) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000440)={0x2, 0x83b58f3a6c22eb1d, 0x9}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:19 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="417704000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="1ec209ad1e5ccb3915b831d82ac4b786267badd63e55ad0be7a5323d82d37362850ab8cfc8f2b2f16781c85d1e72af117e7113f9c479fb541af1c9b5273b49a055ef0bdff902b736d69a9bcb93fd7c97c2fd25422400"/101], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2a6502, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) r3 = epoll_create1(0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x30000004}) r6 = dup(r3) epoll_pwait(r6, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) 07:55:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r2, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r2, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1484.302704] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1484.320729] ubi0: attaching mtd0 07:55:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r2, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r2, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1484.387355] ubi0: scanning is finished 07:55:19 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1484.473182] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1484.482898] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1484.490427] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1484.499613] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1484.507249] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1484.513334] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1484.521086] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1484.530763] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1484.540710] ubi0: background thread "ubi_bgt0d" started, PID 28036 [ 1484.547179] ubi: mtd0 is already attached to ubi0 [ 1484.552249] ubi: mtd0 is already attached to ubi0 [ 1484.557901] ubi: mtd0 is already attached to ubi0 [ 1484.563171] ubi: mtd0 is already attached to ubi0 [ 1484.568803] ubi0: detaching mtd0 07:55:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffe, 0x0, 0x5000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1484.576451] ubi0: mtd0 is detached [ 1484.586829] ubi0: attaching mtd0 [ 1484.591134] ubi0: scanning is finished 07:55:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)={0xf4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x35, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @channel_switch={0x25, 0x3, {0x0, 0xb0, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24044814}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x550000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8c009}, 0x20004080) 07:55:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:19 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000d30aed299e11a78983fda17c200f017a000000000000000600000008000300", @ANYRES32=0x0], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x550000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = epoll_create1(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000040)=0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x30000004}) r5 = dup(0xffffffffffffffff) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) [ 1484.660354] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1484.671751] ubi0: attaching mtd0 [ 1484.676603] ubi0: scanning is finished [ 1484.731543] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1484.740902] ubi0: attaching mtd0 [ 1484.746268] ubi0: scanning is finished 07:55:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000025ef53f4aa2f465f16a1de5e03d9879c086aa440b90ecf8fc27bb702a6e8dfe19a6d36a8df54bf4edfb6ba3d1a91560ec018a97a05485dd31e88e2dcf99613b5d85266b26bb4c70d15249523854e988418286629c25ce1f28bb475a6b16d4d7d276f19e9c8c0b96c76d9b2896a2e439911d7f9bb8f3bccc0738b70753692671dfaa6", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:19 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) quotactl(0x6, &(0x7f0000000000)='./file0\x00', 0xee00, &(0x7f00000000c0)="e2443546af7e6ecfa131113cd8427e26c140bd0989153f86406e14a1592e01d70fd7d468a68c8d292880648f15e7cf25ffc1850343b6e53b907a44668959472cf6292574f8fe50bcba7612d89fffaf0ce92311e27467dcd03f16dd20b3c7dae430eeeabef8dc57409bdec1092561063d24e4e839bd3561b87045bd71bb16540a85c674894189944980c3c7ecb3539a12e7eccd18a73c47f1dd91743e4f3bf259e65398cdab3a1ae10737a21064126dfd2e23263d4d4437f9f15ed7") ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="04802bbd7000fddbdf252100000008000300", @ANYRES32, @ANYBLOB="10002d800a0000000202020202020000b7002a008c18a10073ee5a127217361554fbc134b53c3005ca9524c587716b9713cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e00004002c80"], 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 07:55:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1484.794536] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1484.803638] ubi0: attaching mtd0 [ 1484.807946] ubi0: scanning is finished 07:55:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1484.885413] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1484.892598] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1484.904745] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1484.913608] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1484.921360] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1484.928283] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1484.936243] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1484.946119] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1484.956214] ubi0: background thread "ubi_bgt0d" started, PID 28086 [ 1484.962595] ubi0: detaching mtd0 [ 1484.968482] ubi0: mtd0 is detached [ 1484.973423] ubi0: attaching mtd0 [ 1484.985625] ubi0: scanning is finished [ 1485.037301] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1485.044804] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1485.051450] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1485.059118] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1485.066699] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1485.072799] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1485.081197] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1485.091323] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1485.101502] ubi0: background thread "ubi_bgt0d" started, PID 28101 [ 1485.102217] ubi: mtd0 is already attached to ubi0 [ 1485.114514] ubi0: detaching mtd0 [ 1485.122896] ubi0: mtd0 is detached [ 1485.131758] ubi0: attaching mtd0 [ 1485.140754] ubi0: scanning is finished [ 1485.199570] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1485.207161] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1485.213701] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1485.222887] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1485.230152] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1485.237686] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1485.245206] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1485.254716] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1485.265145] ubi0: background thread "ubi_bgt0d" started, PID 28108 [ 1485.271552] ubi: mtd0 is already attached to ubi0 [ 1485.277116] ubi0: detaching mtd0 [ 1485.282580] ubi0: mtd0 is detached [ 1485.288951] ubi0: attaching mtd0 [ 1485.293235] ubi0: scanning is finished 07:55:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:20 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000d30aed299e11a78983fda17c200f017a000000000000000600000008000300", @ANYRES32=0x0], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x550000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = epoll_create1(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000040)=0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x30000004}) r5 = dup(0xffffffffffffffff) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) [ 1485.340485] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1485.352682] ubi0: attaching mtd0 [ 1485.357484] ubi0: scanning is finished 07:55:20 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) openat(r2, &(0x7f0000000000)='./file0\x00', 0x3, 0x21) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2a8b82, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000000c0)={0x2, {{0x2, 0x4e22, @local}}, 0x1, 0x1, [{{0x2, 0x4e23, @remote}}]}, 0x110) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 07:55:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1485.430265] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1485.439632] ubi0: attaching mtd0 [ 1485.444318] ubi0: scanning is finished 07:55:20 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_free_blocks\x00'}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = epoll_create(0x80) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{r5}, r6, 0x12, @inherit={0x50, &(0x7f0000001800)={0x1, 0x1, 0x5, 0xffffffffffffffff, {0x8, 0x0, 0x5, 0x7, 0x8770}, [0x20]}}, @subvolid=0x1f}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000002c0)={{}, r6, 0x10, @unused=[0x4, 0x0, 0x6, 0x7fff], @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"db9d3f230249eb22b0099c9f05550615", r6, 0x0, {0x1, 0x10001}, {0x2, 0x100}, 0x39e0, [0x7, 0x16a, 0xffffffffffffff7f, 0x5, 0xfffffffffffeffff, 0x20, 0x7, 0x1, 0x2, 0x0, 0x2000, 0x5, 0x9, 0x0, 0xfffffffffffffffd, 0xfffffffffffffff7]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000040)=r6) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) 07:55:20 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000000)={0x3, 0x4}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 07:55:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xd6c0, 0x75}}}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8917}]]}, 0x40}, 0x1, 0x0, 0x0, 0x400d000}, 0x4) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1485.518432] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1485.530617] ubi0: attaching mtd0 [ 1485.555925] ubi0: scanning is finished 07:55:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) [ 1485.672376] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1485.682622] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1485.690030] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1485.696934] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1485.703652] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1485.710858] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1485.719089] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1485.731124] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1485.746903] ubi0: background thread "ubi_bgt0d" started, PID 28164 [ 1485.747073] ubi: mtd0 is already attached to ubi0 [ 1485.758834] ubi0: detaching mtd0 07:55:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) 07:55:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="ec4ee616f5f30cab98bcff05c62ac4d5e7c199f4cbc39b643ffd8300bfceec9303a1fe75cfc508de86b4650000000001f626958ab604d30f74b4115cea2ce87923853541da3313bcf46ce867c5e82dc2308c0dcd0f97de70418d1070ebe0591363988df8d42618969008ca5e160289a00e48323332253754cf534dd98e7e5a2ffb4b5b98f90ffb2c18cb19a14bf34b14bfffe13e3bde470633052466046e42d475971d", @ANYRES16=0x0, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564703a73797a320000000044000400200001000a00000000000000fc00000000000000000000000000000000000000200002000a00000000000000ff02000000000000000000000000000100000000"], 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r4, 0x35, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000a40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x6}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fd3d7b7c1e"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "a43ed7946b6d10514f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "04fe8b36d9f6665fa4ca"}]}, 0x78}}, 0x4000) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000900)={0x1284, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_IE={0xa2, 0x2a, [@random={0x2, 0x80, "674daa79b67f6fbd407efbf9218019e723c4c8e06f7d313a44062a2d9dbfe86755a8c74268a06e39a84402841a20201c7dc9d90217aca696a13d67d16fb9fb62f4ba1eeba486850968e262a08c980bbaeef4d577262fdbc526cc3f38dd416e9f424db78530208260f643949a89308d2ce5bdddd9667e31798af39e27ad222f64"}, @peer_mgmt={0x75, 0x8, {0x0, 0x2, @val=0x7f, @val=0x7, @void}}, @mic={0x8c, 0x10, {0x560, "277ec48c233b", @short="6c0ae4b1d11e0408"}}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x11c0, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb3, 0x2, "4ef0f17f2d6c77b98fb4b98a30d2225e375dc045da429c37683273faf35efa0f08b2f6459d332f5215b97610b8e2585dab02d5cc1faa0a16e08a0f575a8f3a789764da7569ebb5b93bc584a6c5e2eab6ea9fbd39622778cd66b0f3cf0f99ccaac79b8e77c44e6add5178defe5576abe9b4792a08166c3f514a281230a58ddbeea51605c6e4b0b7d35ff7702b151d7edd54f3e8bb55fa2ac8ac1d039cea097c486969c97d1e02ca056497ca3ee42dd3"}, @NL80211_BAND_5GHZ={0x95, 0x1, "0dfc64fb1ba942ffee1b3e38986235e3cb347f5032f7d4d731bec22b2a8c8f034a5ed3b950fbdcafd5768179eb11a86c6ad3434120cb432af3bd09f7af39c0b7b6a7adb60363f207a0ebde582e219173cea95115f5afff0c4f699ad6ac67ba348011ef1ae8f5091b668e5decfd520bdc68ab4bde825f15f3b436ccbf4a4a090ba5a27dc2e8a034b766fd0bf6b68d29dcbe"}, @NL80211_BAND_60GHZ={0x1004, 0x2, "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"}, @NL80211_BAND_60GHZ={0x15, 0x2, "b1fc45c0dff6fd87579364aeae1aa94083"}, @NL80211_BAND_2GHZ={0x53, 0x0, "1b9d93da6b093424f02a5f5bc8be64321c5998aa72d97f8916b41655aa1fe0dce04fca5d3ffff58a69a73b19db709e6bbd69083fe13c3b98bbf2067013e77443001601625431c98060829e80772406"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xfff}]}, 0x1284}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000090) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) 07:55:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) readv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f0000000040)=""/36, 0x24}], 0x2) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="39002a0005281f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd710700000401000000020000000010002d800a000000020202020202000092002a006b8c13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2000004002c80"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1485.770244] ubi0: mtd0 is detached [ 1485.779978] ubi0: attaching mtd0 07:55:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x0) [ 1485.824503] ubi0: scanning is finished [ 1485.917164] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1485.929321] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1485.941362] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1485.947919] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1485.955108] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1485.961207] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1485.968929] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1485.979945] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1485.990061] ubi0: background thread "ubi_bgt0d" started, PID 28186 [ 1485.990762] ubi: mtd0 is already attached to ubi0 [ 1486.002392] ubi: mtd0 is already attached to ubi0 [ 1486.009026] ubi0: detaching mtd0 [ 1486.014220] ubi0: mtd0 is detached [ 1486.019384] ubi0: attaching mtd0 [ 1486.031738] ubi0: scanning is finished [ 1486.080960] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1486.088167] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1486.095148] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1486.101423] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1486.108293] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1486.114716] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1486.122014] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1486.131743] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1486.141322] ubi0: background thread "ubi_bgt0d" started, PID 28196 [ 1486.142178] ubi: mtd0 is already attached to ubi0 [ 1486.155470] ubi: mtd0 is already attached to ubi0 [ 1486.160412] ubi0: detaching mtd0 [ 1486.185278] ubi0: mtd0 is detached [ 1486.191209] ubi0: attaching mtd0 [ 1486.197215] ubi0: scanning is finished 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 07:55:21 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffddf, &(0x7f00000005c0)={&(0x7f0000000600)={0x1a4, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x90, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x37b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="67431215d4f2"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x0, 0x3, 0x621edbcc}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x40}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x0, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffffe}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="362754fbc13498d3f054521d510f8771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xcb}, {0x8, 0x0, 0x57}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0xfffffff8}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x5}]}, @NL80211_ATTR_BSSID={0xa}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x24044094}, 0x8000094) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 07:55:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000580)={'ip_vti0\x00', {0x2, 0x0, @local}}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1, 0x4, &(0x7f0000000500)=[{&(0x7f0000000140)="cfa2f15da09d054565f1a992efc35921a8f3e3a56104d291a982e806b083b6642001288b8cd6d16235595467a3d5c50703d3503f964c950196051703308c4d8b959acfe7efd24404bcb1429abbd5d9ddd28f1dcbc06169e5c3a16f185ef7757a15145fff2bc2df32fda28c8381f6bce2962d38a1c27752b80511daedf675805b164317006db696806fa12ee061cc34dfdf32c9db102c53b1f6c0d82989351b3bae76dc8c02c79bb2cbf7944afaf244cf1048801ab0005807f669afb0e83790db6b1eca9ae31ae2c3b57b87a4", 0xcc, 0x40}, {&(0x7f0000000380)="e1939e1ab69b6130c15aa68c753a586bc590dbacadc4711b3c61c35791c296784eda6b2dd258eccadcaff4a122eae82c01fd4b0e7d02034f85989476d01f62b1790a2facf1af13648e5482f4f6f095601516a6cc948bac360bb09307e8a186f2dc0686d48d7fc0f78afb10b5f44e0d86bd982f17f50e6a75d7472b8e7301558f9d7f801b1a364bf1a0bbfb5b1f0c454f3ea34bd251a2740aa8b3cf1ae5c12378194f71b71874c5058c4e0b7d0e54ce67c7312984fa1a56a23251b467985c7610eb", 0xc1, 0x6}, {&(0x7f0000000280)="05ab0c47f273d6738b5d62c2aa39d027e45cc1d4d8140bbbe6b32c3cb25d813571bc2866", 0x24, 0xffffffffffffb769}, {&(0x7f00000002c0)="7b2be1de10974a5e30fdeaf0e981053da4a341e8dee1d36f4bb0ef720d333dad73bb6d9198689aab1de6f5b1e16006fff4f6f6239b82048b", 0x38, 0x8000}], 0x14082, &(0x7f0000000640)={[{'wlan0\x00'}, {'/)/*&('}, {'\x02\x02\x02\x02\x02\x02'}, {'wlan0\x00'}, {'['}, {}, {'^{'}], [{@hash}, {@audit}, {@subj_user={'subj_user', 0x3d, '\';-%%#($)'}}]}) [ 1486.235716] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1486.245342] ubi0: attaching mtd0 [ 1486.249468] ubi0: scanning is finished 07:55:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500"/18, @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)='bond0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x44}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vti={{0x8}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x7}, @IFLA_VTI_LINK={0x8, 0x1, r5}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x78}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x6c}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}], @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010100}, @IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}, @vti_common_policy]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x90}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'erspan0\x00', r5, 0x40, 0x8000, 0x200, 0x9, {{0x8, 0x4, 0x2, 0x2c, 0x20, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x40, 0x0, 0x0, [0x1]}]}}}}}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$isdn_base(0x22, 0x3, 0x0) dup3(r2, r8, 0x80000) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 1486.303754] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1486.319963] ubi0: attaching mtd0 [ 1486.326834] ubi0: scanning is finished 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 07:55:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/58, 0x12}, {&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000840)=""/257, 0xff}, {&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f0000000300)=""/202, 0xca}], 0x5, 0x81, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 1486.399624] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1486.424100] ubi0: attaching mtd0 [ 1486.444752] ubi0: scanning is finished 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 1486.474158] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop2 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1486.546747] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1486.559585] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1486.567121] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1486.575766] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1486.582787] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1486.592093] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1486.601462] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1486.613209] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1486.623560] ubi0: background thread "ubi_bgt0d" started, PID 28257 [ 1486.624483] ubi: mtd0 is already attached to ubi0 [ 1486.635899] ubi0: detaching mtd0 [ 1486.640753] ubi0: mtd0 is detached [ 1486.650284] ubi0: attaching mtd0 [ 1486.657914] ubi0: scanning is finished [ 1486.717448] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1486.724628] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1486.731154] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1486.738654] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1486.746528] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1486.752670] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1486.760456] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1486.770765] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1486.780681] ubi0: background thread "ubi_bgt0d" started, PID 28269 [ 1486.781676] ubi: mtd0 is already attached to ubi0 [ 1486.792517] ubi0: detaching mtd0 [ 1486.798010] ubi0: mtd0 is detached [ 1486.804129] ubi0: attaching mtd0 [ 1486.823691] ubi0: scanning is finished [ 1486.870796] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1486.878027] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1486.885681] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1486.892093] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1486.899237] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1486.905563] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:21 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xe8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000840)=0x2, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "40049b6e0f45e7980d30219f316e2beeed18b3b2204d2aa2d43b2e1f9be7f8dd", "b7561adfd32a75e15b4d83625c5810accb7693d817c20e1a7fb8db140d6d95a5e06e763f84dc0ffc6f73a736c27525cb", "1c4fd9c8035c33897ba43d56629cf3da82f29e043e990b8a1fa21d80", {"c65126892848224982f205ca46aa7a6e", "1ca0e7b6a4ae474e99fda515394d9780"}}}}}}}}, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = dup(0xffffffffffffffff) epoll_pwait(r4, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) openat(r4, &(0x7f0000000040)='./file0\x00', 0x44000, 0x3b1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, 0x0, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1486.912919] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1486.922760] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1486.932401] ubi0: background thread "ubi_bgt0d" started, PID 28276 [ 1486.932455] ubi: mtd0 is already attached to ubi0 [ 1486.944667] ubi: mtd0 is already attached to ubi0 07:55:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000580)={'ip_vti0\x00', {0x2, 0x0, @local}}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1, 0x4, &(0x7f0000000500)=[{&(0x7f0000000140)="cfa2f15da09d054565f1a992efc35921a8f3e3a56104d291a982e806b083b6642001288b8cd6d16235595467a3d5c50703d3503f964c950196051703308c4d8b959acfe7efd24404bcb1429abbd5d9ddd28f1dcbc06169e5c3a16f185ef7757a15145fff2bc2df32fda28c8381f6bce2962d38a1c27752b80511daedf675805b164317006db696806fa12ee061cc34dfdf32c9db102c53b1f6c0d82989351b3bae76dc8c02c79bb2cbf7944afaf244cf1048801ab0005807f669afb0e83790db6b1eca9ae31ae2c3b57b87a4", 0xcc, 0x40}, {&(0x7f0000000380)="e1939e1ab69b6130c15aa68c753a586bc590dbacadc4711b3c61c35791c296784eda6b2dd258eccadcaff4a122eae82c01fd4b0e7d02034f85989476d01f62b1790a2facf1af13648e5482f4f6f095601516a6cc948bac360bb09307e8a186f2dc0686d48d7fc0f78afb10b5f44e0d86bd982f17f50e6a75d7472b8e7301558f9d7f801b1a364bf1a0bbfb5b1f0c454f3ea34bd251a2740aa8b3cf1ae5c12378194f71b71874c5058c4e0b7d0e54ce67c7312984fa1a56a23251b467985c7610eb", 0xc1, 0x6}, {&(0x7f0000000280)="05ab0c47f273d6738b5d62c2aa39d027e45cc1d4d8140bbbe6b32c3cb25d813571bc2866", 0x24, 0xffffffffffffb769}, {&(0x7f00000002c0)="7b2be1de10974a5e30fdeaf0e981053da4a341e8dee1d36f4bb0ef720d333dad73bb6d9198689aab1de6f5b1e16006fff4f6f6239b82048b", 0x38, 0x8000}], 0x14082, &(0x7f0000000640)={[{'wlan0\x00'}, {'/)/*&('}, {'\x02\x02\x02\x02\x02\x02'}, {'wlan0\x00'}, {'['}, {}, {'^{'}], [{@hash}, {@audit}, {@subj_user={'subj_user', 0x3d, '\';-%%#($)'}}]}) 07:55:21 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x100, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x39, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x92, 0x2a, [@random={0x6b, 0x8c, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d2"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004004) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:21 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6ffe0000000000000000b73a1cccabe768bb0d0001007564703a73797a320000000044000400200001000a00000000000009003c078600000000000000000000000002000000000000200002000a00000000000000ff0e00000000467a8543c0b1b3cd000100"], 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r4, 0x35, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000a40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x6}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fd3d7b7c1e"}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "a43ed7946b6d10514f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "04fe8b36d9f6665fa4ca"}]}, 0x78}}, 0x4000) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x8, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4810) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40186f40, 0x550000) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r8, 0x40046f41, 0x76006e) 07:55:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="cb9024a15271d9fb"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB=',C\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1486.968887] ubi: mtd0 is already attached to ubi0 [ 1486.975284] ubi: mtd0 is already attached to ubi0 [ 1486.999822] ubi: mtd0 is already attached to ubi0 07:55:22 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="e80037740040029b60c61527ed61614f99c88eed4c1f33f9378746a4eb373920176a2b281d542e997d680e5651f95dd998e51b11badc79830c2d296153cd2b9c03f53851fa94489314dcf31a9d0b477b322f607f6c79d5444ea50515de8337669f75bc47", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf25a10000000800030032ac06e932d4c0ed837938f5767a4f9f340c16d49ea1730b9cac458eaeb5694b1d382b933f89d87961ef55875f0870a52a5a62127f0e62f88ed3a2030b2880c4dcc0052460c55f89c1fdac1d2e1b3a1da3dc8f79daba05000000090f2f64", @ANYRES32=r1, @ANYBLOB="10002d800a0000000202020202020000b7002a008c18a10073ee5a127217361554fbc134b53c3005ca9524c587716b9713cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e00004002c80"], 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000000)) [ 1487.055533] ubi: mtd0 is already attached to ubi0 [ 1487.072548] ubi: mtd0 is already attached to ubi0 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="39002a0005281f4304e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd710700000401000000020000000010002d800a000000020202020202000092002a006b8c13cf8579b5ad2953f5b6a59acc9bd7e6ddf236beeb5fe558a720aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70be336dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f"], 0x100}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1487.098950] ubi0: detaching mtd0 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 1487.152594] ubi0: mtd0 is detached [ 1487.164256] ubi0: attaching mtd0 [ 1487.176358] ubi0: scanning is finished 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 1487.250761] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1487.258189] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1487.266060] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1487.272550] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1487.282167] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1487.291193] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) [ 1487.305653] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1487.317034] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop2 [ 1487.325344] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1487.338021] ubi0: background thread "ubi_bgt0d" started, PID 28322 [ 1487.345329] ubi: mtd0 is already attached to ubi0 [ 1487.350479] ubi: mtd0 is already attached to ubi0 [ 1487.357172] ubi: mtd0 is already attached to ubi0 [ 1487.362800] ubi: mtd0 is already attached to ubi0 [ 1487.371173] ubi0: detaching mtd0 [ 1487.381365] ubi0: mtd0 is detached [ 1487.395218] ubi0: attaching mtd0 [ 1487.399554] ubi0: scanning is finished 07:55:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000580)={'ip_vti0\x00', {0x2, 0x0, @local}}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1, 0x4, &(0x7f0000000500)=[{&(0x7f0000000140)="cfa2f15da09d054565f1a992efc35921a8f3e3a56104d291a982e806b083b6642001288b8cd6d16235595467a3d5c50703d3503f964c950196051703308c4d8b959acfe7efd24404bcb1429abbd5d9ddd28f1dcbc06169e5c3a16f185ef7757a15145fff2bc2df32fda28c8381f6bce2962d38a1c27752b80511daedf675805b164317006db696806fa12ee061cc34dfdf32c9db102c53b1f6c0d82989351b3bae76dc8c02c79bb2cbf7944afaf244cf1048801ab0005807f669afb0e83790db6b1eca9ae31ae2c3b57b87a4", 0xcc, 0x40}, {&(0x7f0000000380)="e1939e1ab69b6130c15aa68c753a586bc590dbacadc4711b3c61c35791c296784eda6b2dd258eccadcaff4a122eae82c01fd4b0e7d02034f85989476d01f62b1790a2facf1af13648e5482f4f6f095601516a6cc948bac360bb09307e8a186f2dc0686d48d7fc0f78afb10b5f44e0d86bd982f17f50e6a75d7472b8e7301558f9d7f801b1a364bf1a0bbfb5b1f0c454f3ea34bd251a2740aa8b3cf1ae5c12378194f71b71874c5058c4e0b7d0e54ce67c7312984fa1a56a23251b467985c7610eb", 0xc1, 0x6}, {&(0x7f0000000280)="05ab0c47f273d6738b5d62c2aa39d027e45cc1d4d8140bbbe6b32c3cb25d813571bc2866", 0x24, 0xffffffffffffb769}, {&(0x7f00000002c0)="7b2be1de10974a5e30fdeaf0e981053da4a341e8dee1d36f4bb0ef720d333dad73bb6d9198689aab1de6f5b1e16006fff4f6f6239b82048b", 0x38, 0x8000}], 0x14082, &(0x7f0000000640)={[{'wlan0\x00'}, {'/)/*&('}, {'\x02\x02\x02\x02\x02\x02'}, {'wlan0\x00'}, {'['}, {}, {'^{'}], [{@hash}, {@audit}, {@subj_user={'subj_user', 0x3d, '\';-%%#($)'}}]}) 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x38, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x54}}, 0x0) [ 1487.486339] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1487.498228] ubi0: attaching mtd0 [ 1487.502494] ubi0: scanning is finished [ 1487.544835] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1487.554363] ubi0: attaching mtd0 [ 1487.558564] ubi0: scanning is finished [ 1487.602583] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop2 [ 1487.604127] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1487.617922] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1487.625455] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1487.631711] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1487.638738] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1487.644862] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x38, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x54}}, 0x0) 07:55:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000900)={{0x0, 0x0, 0x7, 0x7fffffff, 0xfff, 0x802b537, 0x2, 0xfe28, 0x7, 0x3, 0x3, 0xfffffffffffffffa, 0x3f, 0x7, 0x5c}}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) 07:55:22 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="e80037740040029b60c61527ed61614f99c88eed4c1f33f9378746a4eb373920176a2b281d542e997d680e5651f95dd998e51b11badc79830c2d296153cd2b9c03f53851fa94489314dcf31a9d0b477b322f607f6c79d5444ea50515de8337669f75bc47", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf25a10000000800030032ac06e932d4c0ed837938f5767a4f9f340c16d49ea1730b9cac458eaeb5694b1d382b933f89d87961ef55875f0870a52a5a62127f0e62f88ed3a2030b2880c4dcc0052460c55f89c1fdac1d2e1b3a1da3dc8f79daba05000000090f2f64", @ANYRES32=r1, @ANYBLOB="10002d800a0000000202020202020000b7002a008c18a10073ee5a127217361554fbc134b53c3005ca9524c587716b9713cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e00004002c80"], 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000000)) 07:55:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x30, r1, 0xe094a000) dup3(r0, r1, 0x80000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) 07:55:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="cb9024a15271d9fb"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB=',C\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1487.652127] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1487.661449] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1487.670784] ubi0: background thread "ubi_bgt0d" started, PID 28367 [ 1487.673771] ubi: mtd0 is already attached to ubi0 [ 1487.682012] ubi0: detaching mtd0 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x38, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x54}}, 0x0) 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x3c}}, 0x0) [ 1487.742549] ubi0: mtd0 is detached [ 1487.750476] ubi0: attaching mtd0 07:55:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xec, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9a, 0x2a, [@tim={0x5, 0x34, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b3"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x20, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1487.784665] ubi0: scanning is finished 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x3c}}, 0x0) 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x3c}}, 0x0) 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) 07:55:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) [ 1487.891175] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1487.901057] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1487.909353] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1487.916545] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1487.923388] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1487.930375] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:22 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="e80037740040029b60c61527ed61614f99c88eed4c1f33f9378746a4eb373920176a2b281d542e997d680e5651f95dd998e51b11badc79830c2d296153cd2b9c03f53851fa94489314dcf31a9d0b477b322f607f6c79d5444ea50515de8337669f75bc47", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf25a10000000800030032ac06e932d4c0ed837938f5767a4f9f340c16d49ea1730b9cac458eaeb5694b1d382b933f89d87961ef55875f0870a52a5a62127f0e62f88ed3a2030b2880c4dcc0052460c55f89c1fdac1d2e1b3a1da3dc8f79daba05000000090f2f64", @ANYRES32=r1, @ANYBLOB="10002d800a0000000202020202020000b7002a008c18a10073ee5a127217361554fbc134b53c3005ca9524c587716b9713cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e00004002c80"], 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000000)) [ 1487.939350] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1487.949228] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1487.959098] ubi0: background thread "ubi_bgt0d" started, PID 28402 [ 1487.959362] ubi: mtd0 is already attached to ubi0 [ 1487.971508] ubi: mtd0 is already attached to ubi0 [ 1487.977336] ubi: mtd0 is already attached to ubi0 [ 1487.982286] ubi0: detaching mtd0 [ 1487.997505] ubi0: mtd0 is detached [ 1488.019194] ubi0: attaching mtd0 [ 1488.049028] ubi0: scanning is finished [ 1488.100320] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1488.107735] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1488.114948] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1488.121236] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1488.128174] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1488.134754] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x30000004}) r4 = dup(r1) epoll_pwait(r4, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000001c0)=0x2000) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x550000) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x11ff}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x44, 0x5, 0x5, 0x3, 0x2, 0xf000, 0x7bb]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5f2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) 07:55:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="8e1781c0", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x550000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000040)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="cb9024a15271d9fb"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB=',C\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:23 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="e80037740040029b60c61527ed61614f99c88eed4c1f33f9378746a4eb373920176a2b281d542e997d680e5651f95dd998e51b11badc79830c2d296153cd2b9c03f53851fa94489314dcf31a9d0b477b322f607f6c79d5444ea50515de8337669f75bc47", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf25a10000000800030032ac06e932d4c0ed837938f5767a4f9f340c16d49ea1730b9cac458eaeb5694b1d382b933f89d87961ef55875f0870a52a5a62127f0e62f88ed3a2030b2880c4dcc0052460c55f89c1fdac1d2e1b3a1da3dc8f79daba05000000090f2f64", @ANYRES32=r1, @ANYBLOB="10002d800a0000000202020202020000b7002a008c18a10073ee5a127217361554fbc134b53c3005ca9524c587716b9713cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e00004002c80"], 0xe8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000000)) [ 1488.142120] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1488.151799] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1488.161245] ubi0: background thread "ubi_bgt0d" started, PID 28418 [ 1488.167685] ubi: mtd0 is already attached to ubi0 [ 1488.172804] ubi: mtd0 is already attached to ubi0 [ 1488.177720] ubi: mtd0 is already attached to ubi0 [ 1488.182615] ubi0: detaching mtd0 [ 1488.189651] ubi0: mtd0 is detached 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x48}}, 0x0) [ 1488.251770] ubi0: attaching mtd0 [ 1488.287241] ubi0: scanning is finished 07:55:23 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000d30aed299e11a78983fda17c200f017a000000000000000600000008000300", @ANYRES32=0x0], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x550000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = epoll_create1(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x800006, 0x0, 0x0, 0xffffffffffffffff}) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000040)=0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x48}}, 0x0) 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x48, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x48}}, 0x0) 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x5c}}, 0x0) 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x5c}}, 0x0) [ 1488.401128] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1488.409241] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1488.419519] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1488.427137] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1488.435788] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1488.442101] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x5c}}, 0x0) [ 1488.450669] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1488.461634] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1488.472248] ubi0: background thread "ubi_bgt0d" started, PID 28448 [ 1488.476239] ubi: mtd0 is already attached to ubi0 [ 1488.484591] ubi: mtd0 is already attached to ubi0 [ 1488.489975] ubi: mtd0 is already attached to ubi0 [ 1488.497523] ubi0: detaching mtd0 [ 1488.504853] ubi0: mtd0 is detached [ 1488.511098] ubi0: attaching mtd0 [ 1488.543087] ubi0: scanning is finished [ 1488.610445] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1488.617552] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1488.625091] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1488.631340] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1488.639232] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1488.645815] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1488.653245] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1488.663392] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1488.673482] ubi0: background thread "ubi_bgt0d" started, PID 28469 [ 1488.675199] ubi0: detaching mtd0 [ 1488.688664] ubi0: mtd0 is detached [ 1488.692304] ubi0: attaching mtd0 [ 1488.699381] ubi0: scanning is finished [ 1488.738603] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1488.747142] ubi0: attaching mtd0 [ 1488.751225] ubi0: scanning is finished 07:55:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="cb9024a15271d9fb"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB=',C\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:23 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000d30aed299e11a78983fda17c200f017a000000000000000600000008000300", @ANYRES32=0x0], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x550000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = epoll_create1(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x0, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000040)=0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) 07:55:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000000c0)={0x0, 0x80000001}) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000040)={0x7, 0x200}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="25721a0002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x550000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) 07:55:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0xec, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9a, 0x2a, [@tim={0x5, 0x34, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b3"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x20, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xec}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1488.782361] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1488.836768] ubi0: attaching mtd0 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) [ 1488.874124] ubi0: scanning is finished 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001900)=ANY=[@ANYBLOB="24000000936ae1806b3c4c204ff91acf87aa69152f9b6b1f4af084d85cfb65b5b4b233a5db0a8064f80fd19835d8ad463cdc90c4727a0c553eee54f86c896a4a77c217f8ec3b3c69e792bc9baa94a69c3e8700a4ca73f6eda3cd46a45273452313c70e74bda46c05e46418b8ca40e43904e71e373561f4cd24e33fe4058ea3d03b8f0b7bd65c9e2a44a06576f7d2cae3fed71c9a9622b3bd07956da5d78371b521fb1a54c24ca7674b5810bf6d54bf8a60698dcc413dcb5f466161c60ba3e7818585f811f38e9dfb3199f5b09eb4269575c4526a", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="00001a000000000000000400000002000000"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f1f30d451119d83b4049e0cd2dd02719ba99dcc2ad", @ANYRES16=r3, @ANYBLOB="00042bbd7000fedbdf25150000001c000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000002400018008000300020000000800030000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x728, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'erspan0\x00'}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8001}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2000000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x550000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f00000001c0)='bond0\x00') sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}, 0x4, 0x4, 0x4, 0x2}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000000140)="45445ac72df74462674a68488a83efc69b112def9211b6eae3ed0feb925a6b37798e2a944924599e1a486408ea9809cd03d8ee4f11c86e3d0ee0e58193ec75bc1971d9746c2065d6a59ae2acc5227454a3cbfd9c409c71d2ebf747e86af918c8770ba29aee718ac2ad77db1ce90151133268b65b1fb0d12ea7b2320f8e4193f46c94299b763fb84edac199b47994b29a217e4945eab177f0f56b2c777f91c2d94cb8524a97", 0xa5}], 0x2}, 0x80c0) 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1488.997410] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1489.015285] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1489.021997] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1489.028869] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1489.036247] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 07:55:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) [ 1489.042519] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1489.051458] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1489.062151] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1489.073131] ubi0: background thread "ubi_bgt0d" started, PID 28509 [ 1489.080327] ubi: mtd0 is already attached to ubi0 [ 1489.085756] ubi: mtd0 is already attached to ubi0 [ 1489.091960] ubi0: detaching mtd0 07:55:24 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x94, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3c, 0x2a, [@tim={0x5, 0x28, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd"}}, @random={0x7, 0xa, "639cfbce0d7eebc49a5e"}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x28, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x23, 0x2, "fda0d2653fa7bf6746f1f5e65532078d2a65e2c639583cd588d414bc0765ad"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000004) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) 07:55:24 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000d30aed299e11a78983fda17c200f017a000000000000000600000008000300", @ANYRES32=0x0], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x550000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = epoll_create1(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x0, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000040)=0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) [ 1489.105150] ubi0: mtd0 is detached [ 1489.110242] ubi0: attaching mtd0 07:55:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x4, 0x1, 0x40, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x77, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08f067ee4140d5a133f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4, 0x2c, 0x0, 0x1, [{0x0, 0x0, 0x81}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000001c0)='bond0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x44}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vti={{0x8}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x7}, @IFLA_VTI_LINK={0x8, 0x1, r6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x78}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x6c}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}], @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010100}, @IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}, @vti_common_policy]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x90}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x64}}, 0x10) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) [ 1489.210978] ubi0: scanning is finished [ 1489.271753] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1489.279351] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1489.286171] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1489.292460] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1489.299592] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1489.306369] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:24 executing program 2 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) [ 1489.314840] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1489.324407] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1489.333859] ubi0: background thread "ubi_bgt0d" started, PID 28542 [ 1489.334657] ubi0: detaching mtd0 [ 1489.345079] ubi0: mtd0 is detached [ 1489.348860] ubi0: attaching mtd0 [ 1489.363517] ubi0: scanning is finished 07:55:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) [ 1489.442502] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1489.449195] FAULT_INJECTION: forcing a failure. [ 1489.449195] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.456067] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1489.468757] CPU: 1 PID: 28555 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1489.471122] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 07:55:24 executing program 2 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) [ 1489.476650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.476654] Call Trace: [ 1489.476671] dump_stack+0x1b2/0x281 [ 1489.476685] should_fail.cold+0x10a/0x149 [ 1489.476698] should_failslab+0xd6/0x130 [ 1489.476712] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1489.476722] ion_alloc+0x187/0x810 [ 1489.476736] ? ion_dma_buf_release+0x40/0x40 [ 1489.476748] ? __might_fault+0x177/0x1b0 [ 1489.476759] ion_ioctl+0xea/0x1f0 [ 1489.476766] ? ion_query_heaps+0x360/0x360 [ 1489.476773] ? SyS_write+0x1b7/0x210 [ 1489.476784] ? ion_query_heaps+0x360/0x360 [ 1489.476793] do_vfs_ioctl+0x75a/0xff0 [ 1489.476804] ? ioctl_preallocate+0x1a0/0x1a0 [ 1489.476812] ? lock_downgrade+0x740/0x740 [ 1489.476824] ? __fget+0x225/0x360 [ 1489.476832] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.476842] ? security_file_ioctl+0x83/0xb0 [ 1489.476851] SyS_ioctl+0x7f/0xb0 [ 1489.476858] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.476868] do_syscall_64+0x1d5/0x640 [ 1489.476882] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1489.476889] RIP: 0033:0x4665d9 [ 1489.476894] RSP: 002b:00007f8427c7b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.476904] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1489.476910] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1489.476915] RBP: 00007f8427c7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1489.476920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.476930] R13: 00007ffe0b07524f R14: 00007f8427c7b300 R15: 0000000000022000 [ 1489.558922] FAULT_INJECTION: forcing a failure. [ 1489.558922] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.562754] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1489.575254] CPU: 1 PID: 28560 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1489.581134] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1489.583797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.583801] Call Trace: [ 1489.583817] dump_stack+0x1b2/0x281 [ 1489.583831] should_fail.cold+0x10a/0x149 [ 1489.583846] should_failslab+0xd6/0x130 [ 1489.583857] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1489.583870] ion_system_heap_allocate+0x344/0x8c0 [ 1489.583881] ? ion_alloc+0x187/0x810 [ 1489.583891] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1489.583901] ? ion_system_contig_heap_create+0x130/0x130 [ 1489.583910] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1489.583925] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1489.583935] ion_alloc+0x204/0x810 [ 1489.583948] ? ion_dma_buf_release+0x40/0x40 [ 1489.583961] ? __might_fault+0x177/0x1b0 [ 1489.583973] ion_ioctl+0xea/0x1f0 [ 1489.583982] ? ion_query_heaps+0x360/0x360 [ 1489.583989] ? SyS_write+0x1b7/0x210 [ 1489.584001] ? ion_query_heaps+0x360/0x360 [ 1489.584010] do_vfs_ioctl+0x75a/0xff0 [ 1489.584021] ? ioctl_preallocate+0x1a0/0x1a0 [ 1489.584029] ? lock_downgrade+0x740/0x740 [ 1489.584041] ? __fget+0x225/0x360 [ 1489.593649] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1489.594908] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.594924] ? security_file_ioctl+0x83/0xb0 [ 1489.602189] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1489.609436] SyS_ioctl+0x7f/0xb0 [ 1489.609443] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.609454] do_syscall_64+0x1d5/0x640 [ 1489.609467] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1489.609475] RIP: 0033:0x4665d9 [ 1489.609480] RSP: 002b:00007f8427c7b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.609489] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1489.609495] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1489.609500] RBP: 00007f8427c7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1489.609504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.609510] R13: 00007ffe0b07524f R14: 00007f8427c7b300 R15: 0000000000022000 [ 1489.863353] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1489.873248] ubi0: background thread "ubi_bgt0d" started, PID 28552 [ 1489.880807] ubi0: detaching mtd0 [ 1489.888827] ubi0: mtd0 is detached [ 1489.893299] ubi0: attaching mtd0 [ 1489.904923] ubi0: scanning is finished [ 1489.958943] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1489.966171] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1489.973110] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1489.980905] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1489.988999] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1489.995592] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1490.002942] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1490.013173] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1490.024401] ubi0: background thread "ubi_bgt0d" started, PID 28570 [ 1490.030879] ubi: mtd0 is already attached to ubi0 [ 1490.036955] ubi: mtd0 is already attached to ubi0 [ 1490.042082] ubi0: detaching mtd0 [ 1490.051189] ubi0: mtd0 is detached [ 1490.055539] ubi0: attaching mtd0 [ 1490.060271] ubi0: scanning is finished 07:55:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050200000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8010000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) 07:55:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) 07:55:25 executing program 2 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:25 executing program 0 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:25 executing program 5: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000d30aed299e11a78983fda17c200f017a000000000000000600000008000300", @ANYRES32=0x0], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x550000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = epoll_create1(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x0, 0xb, 0x0, 0xffffffffffffffff}) r4 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, &(0x7f0000000040)=0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x30000004}) r5 = dup(r2) epoll_pwait(r5, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) 07:55:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x8d, {0x4, 0x8, 0xfffffffffffffffb, 0xffffffff, 0x6}}) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1490.120840] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:55:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) [ 1490.175739] FAULT_INJECTION: forcing a failure. [ 1490.175739] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.184548] ubi0: attaching mtd0 [ 1490.211263] CPU: 1 PID: 28590 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1490.219193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.221268] ubi0: scanning is finished [ 1490.228633] Call Trace: [ 1490.228653] dump_stack+0x1b2/0x281 [ 1490.228666] should_fail.cold+0x10a/0x149 [ 1490.228679] should_failslab+0xd6/0x130 [ 1490.228694] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1490.228706] ion_alloc+0x187/0x810 [ 1490.228722] ? ion_dma_buf_release+0x40/0x40 [ 1490.228735] ? __might_fault+0x177/0x1b0 [ 1490.228747] ion_ioctl+0xea/0x1f0 [ 1490.228755] ? ion_query_heaps+0x360/0x360 [ 1490.228764] ? SyS_write+0x1b7/0x210 [ 1490.228776] ? ion_query_heaps+0x360/0x360 [ 1490.228785] do_vfs_ioctl+0x75a/0xff0 [ 1490.228798] ? ioctl_preallocate+0x1a0/0x1a0 [ 1490.228807] ? lock_downgrade+0x740/0x740 [ 1490.228820] ? __fget+0x225/0x360 [ 1490.228833] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.298978] ? security_file_ioctl+0x83/0xb0 [ 1490.303381] SyS_ioctl+0x7f/0xb0 [ 1490.306739] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.310708] do_syscall_64+0x1d5/0x640 [ 1490.314593] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1490.319776] RIP: 0033:0x4665d9 [ 1490.322957] RSP: 002b:00007f4124406188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.330653] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1490.337910] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1490.345171] RBP: 00007f41244061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.352427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.359681] R13: 00007ffc1c6fe6ff R14: 00007f4124406300 R15: 0000000000022000 07:55:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) [ 1490.384304] FAULT_INJECTION: forcing a failure. [ 1490.384304] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.402576] CPU: 1 PID: 28603 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1490.410494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.419877] Call Trace: [ 1490.422491] dump_stack+0x1b2/0x281 [ 1490.426124] should_fail.cold+0x10a/0x149 [ 1490.430310] should_failslab+0xd6/0x130 [ 1490.434288] __kmalloc+0x2c1/0x400 [ 1490.437820] ? sg_kmalloc+0x26/0x60 [ 1490.441440] sg_kmalloc+0x26/0x60 [ 1490.444975] __sg_alloc_table.part.0+0x23f/0x370 [ 1490.449720] ? sg_init_one+0x170/0x170 [ 1490.453610] sg_alloc_table+0x4e/0x250 [ 1490.457489] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1490.462323] ion_system_heap_allocate+0x367/0x8c0 [ 1490.467159] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1490.472614] ? ion_system_contig_heap_create+0x130/0x130 [ 1490.478056] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1490.483149] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1490.488069] ion_alloc+0x204/0x810 [ 1490.491604] ? ion_dma_buf_release+0x40/0x40 [ 1490.496008] ? __might_fault+0x177/0x1b0 [ 1490.500073] ion_ioctl+0xea/0x1f0 [ 1490.503605] ? ion_query_heaps+0x360/0x360 [ 1490.507830] ? SyS_write+0x1b7/0x210 [ 1490.511544] ? ion_query_heaps+0x360/0x360 [ 1490.515791] do_vfs_ioctl+0x75a/0xff0 [ 1490.519588] ? ioctl_preallocate+0x1a0/0x1a0 [ 1490.523988] ? lock_downgrade+0x740/0x740 [ 1490.528256] ? __fget+0x225/0x360 [ 1490.531698] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.535666] ? security_file_ioctl+0x83/0xb0 [ 1490.540071] SyS_ioctl+0x7f/0xb0 [ 1490.543425] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.547393] do_syscall_64+0x1d5/0x640 [ 1490.551306] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1490.556492] RIP: 0033:0x4665d9 [ 1490.559694] RSP: 002b:00007f8427c7b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.567400] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1490.574659] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1490.581919] RBP: 00007f8427c7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.589179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.596443] R13: 00007ffe0b07524f R14: 00007f8427c7b300 R15: 0000000000022000 07:55:25 executing program 0 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) [ 1490.639615] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1490.650899] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1490.667603] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1490.674994] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1490.681598] FAULT_INJECTION: forcing a failure. 07:55:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x60}}, 0x0) [ 1490.681598] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.681859] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1490.705297] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1490.709615] CPU: 1 PID: 28614 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1490.712732] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1490.720509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 07:55:25 executing program 0 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) [ 1490.720514] Call Trace: [ 1490.720531] dump_stack+0x1b2/0x281 [ 1490.720546] should_fail.cold+0x10a/0x149 [ 1490.720560] should_failslab+0xd6/0x130 [ 1490.720573] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1490.720587] ion_system_heap_allocate+0x344/0x8c0 [ 1490.720597] ? ion_alloc+0x187/0x810 [ 1490.720608] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1490.720618] ? ion_system_contig_heap_create+0x130/0x130 [ 1490.720627] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1490.720635] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1490.720645] ion_alloc+0x204/0x810 [ 1490.720658] ? ion_dma_buf_release+0x40/0x40 [ 1490.720671] ? __might_fault+0x177/0x1b0 [ 1490.720683] ion_ioctl+0xea/0x1f0 [ 1490.720692] ? ion_query_heaps+0x360/0x360 [ 1490.720700] ? SyS_write+0x1b7/0x210 [ 1490.720711] ? ion_query_heaps+0x360/0x360 [ 1490.720719] do_vfs_ioctl+0x75a/0xff0 [ 1490.720731] ? ioctl_preallocate+0x1a0/0x1a0 [ 1490.720740] ? lock_downgrade+0x740/0x740 [ 1490.720754] ? __fget+0x225/0x360 [ 1490.720763] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.720773] ? security_file_ioctl+0x83/0xb0 [ 1490.720783] SyS_ioctl+0x7f/0xb0 [ 1490.720791] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.720802] do_syscall_64+0x1d5/0x640 [ 1490.720816] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1490.720825] RIP: 0033:0x4665d9 [ 1490.720830] RSP: 002b:00007f4124406188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.720852] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1490.720857] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1490.720863] RBP: 00007f41244061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.720868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.720873] R13: 00007ffc1c6fe6ff R14: 00007f4124406300 R15: 0000000000022000 [ 1490.775661] FAULT_INJECTION: forcing a failure. [ 1490.775661] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.796263] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1490.798583] CPU: 1 PID: 28619 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1490.801095] ubi: mtd0 is already attached to ubi0 [ 1490.804266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1490.804271] Call Trace: [ 1490.804289] dump_stack+0x1b2/0x281 [ 1490.804303] should_fail.cold+0x10a/0x149 [ 1490.804318] should_failslab+0xd6/0x130 [ 1490.804331] __kmalloc+0x2c1/0x400 [ 1490.804342] ? sg_kmalloc+0x26/0x60 [ 1490.804352] sg_kmalloc+0x26/0x60 [ 1490.804363] __sg_alloc_table.part.0+0x23f/0x370 [ 1490.804372] ? sg_init_one+0x170/0x170 [ 1490.804383] sg_alloc_table+0x4e/0x250 [ 1490.804392] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1490.804406] ion_system_heap_allocate+0x367/0x8c0 [ 1490.804418] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1490.804427] ? ion_system_contig_heap_create+0x130/0x130 [ 1490.804437] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1490.804448] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1490.804458] ion_alloc+0x204/0x810 [ 1490.804471] ? ion_dma_buf_release+0x40/0x40 [ 1490.804484] ? __might_fault+0x177/0x1b0 [ 1490.804495] ion_ioctl+0xea/0x1f0 [ 1490.804505] ? ion_query_heaps+0x360/0x360 [ 1490.804513] ? SyS_write+0x1b7/0x210 [ 1490.804525] ? ion_query_heaps+0x360/0x360 [ 1490.804534] do_vfs_ioctl+0x75a/0xff0 [ 1490.804546] ? ioctl_preallocate+0x1a0/0x1a0 [ 1490.804555] ? lock_downgrade+0x740/0x740 [ 1490.804569] ? __fget+0x225/0x360 [ 1490.804578] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.804588] ? security_file_ioctl+0x83/0xb0 [ 1490.804599] SyS_ioctl+0x7f/0xb0 [ 1490.804606] ? do_vfs_ioctl+0xff0/0xff0 [ 1490.804617] do_syscall_64+0x1d5/0x640 [ 1490.804633] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1490.804643] RIP: 0033:0x4665d9 [ 1490.817256] ubi: mtd0 is already attached to ubi0 [ 1490.820562] RSP: 002b:00007f4124406188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.820577] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1490.825899] ubi0: detaching mtd0 [ 1490.829102] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1490.829107] RBP: 00007f41244061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.829112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1490.829117] R13: 00007ffc1c6fe6ff R14: 00007f4124406300 R15: 0000000000022000 [ 1490.829510] ubi0: background thread "ubi_bgt0d" started, PID 28610 [ 1491.148525] ubi0: mtd0 is detached [ 1491.152152] ubi0: attaching mtd0 [ 1491.157306] ubi0: scanning is finished [ 1491.199115] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1491.208060] ubi0: attaching mtd0 [ 1491.212272] ubi0: scanning is finished 07:55:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000900)={0xd0, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000001c0)='bond0\x00') ftruncate(r3, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) 07:55:26 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x8c00, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80180, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r4, 0x35, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40186f40, 0x550000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r8, 0x40046f41, 0x76006e) 07:55:26 executing program 2 (fault-call:2 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:26 executing program 0 (fault-call:2 fault-nth:3): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x4, 0x1, 0x40, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x77, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08f067ee4140d5a133f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4, 0x2c, 0x0, 0x1, [{0x0, 0x0, 0x81}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000001c0)='bond0\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x44}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x90, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vti={{0x8}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x7}, @IFLA_VTI_LINK={0x8, 0x1, r6}, @IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x78}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x6c}, @IFLA_VTI_OKEY={0x8, 0x3, 0x5}], @IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0x64010100}, @IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}, @vti_common_policy]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x90}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x64}}, 0x10) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40046f41, 0x76006e) [ 1491.258099] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1491.330021] FAULT_INJECTION: forcing a failure. [ 1491.330021] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.355193] ubi0: attaching mtd0 [ 1491.357770] CPU: 1 PID: 28645 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1491.366487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.375840] Call Trace: [ 1491.378434] dump_stack+0x1b2/0x281 [ 1491.382066] should_fail.cold+0x10a/0x149 [ 1491.386213] should_failslab+0xd6/0x130 [ 1491.390183] __kmalloc+0x2c1/0x400 [ 1491.393719] ? dma_buf_export+0x20b/0xa20 [ 1491.397866] ? lock_downgrade+0x740/0x740 [ 1491.402024] dma_buf_export+0x20b/0xa20 [ 1491.406002] ion_alloc+0x5c7/0x810 [ 1491.407314] ubi0: scanning is finished [ 1491.409570] ? ion_dma_buf_release+0x40/0x40 [ 1491.409585] ? __might_fault+0x177/0x1b0 [ 1491.409596] ion_ioctl+0xea/0x1f0 [ 1491.409607] ? ion_query_heaps+0x360/0x360 [ 1491.429627] ? SyS_write+0x1b7/0x210 [ 1491.433341] ? ion_query_heaps+0x360/0x360 [ 1491.437575] do_vfs_ioctl+0x75a/0xff0 [ 1491.441378] ? ioctl_preallocate+0x1a0/0x1a0 [ 1491.445797] ? lock_downgrade+0x740/0x740 [ 1491.449964] ? __fget+0x225/0x360 [ 1491.453420] ? do_vfs_ioctl+0xff0/0xff0 [ 1491.457393] ? security_file_ioctl+0x83/0xb0 [ 1491.461798] SyS_ioctl+0x7f/0xb0 [ 1491.465157] ? do_vfs_ioctl+0xff0/0xff0 [ 1491.469125] do_syscall_64+0x1d5/0x640 [ 1491.473017] entry_SYSCALL_64_after_hwframe+0x46/0xbb 07:55:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1491.478282] RIP: 0033:0x4665d9 [ 1491.481460] RSP: 002b:00007f4124406188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.489190] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1491.496450] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1491.503710] RBP: 00007f41244061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1491.510968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.518232] R13: 00007ffc1c6fe6ff R14: 00007f4124406300 R15: 0000000000022000 07:55:26 executing program 0 (fault-call:2 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) [ 1491.602031] FAULT_INJECTION: forcing a failure. [ 1491.602031] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.621787] FAULT_INJECTION: forcing a failure. [ 1491.621787] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.646408] CPU: 1 PID: 28664 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1491.654317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.663674] Call Trace: [ 1491.666260] dump_stack+0x1b2/0x281 [ 1491.669875] should_fail.cold+0x10a/0x149 [ 1491.674010] should_failslab+0xd6/0x130 [ 1491.677973] kmem_cache_alloc+0x28e/0x3c0 [ 1491.682117] __d_alloc+0x2a/0xa20 [ 1491.685564] anon_inode_getfile+0x101/0x2f0 [ 1491.689875] ? compat_SyS_epoll_pwait+0x240/0x240 [ 1491.694715] ? __lockdep_init_map+0x100/0x560 [ 1491.699205] ? __lockdep_init_map+0x100/0x560 [ 1491.703695] dma_buf_export+0x4c8/0xa20 [ 1491.707662] ion_alloc+0x5c7/0x810 [ 1491.711214] ? ion_dma_buf_release+0x40/0x40 [ 1491.715616] ? __might_fault+0x177/0x1b0 [ 1491.719671] ion_ioctl+0xea/0x1f0 [ 1491.723116] ? ion_query_heaps+0x360/0x360 [ 1491.727340] ? SyS_write+0x1b7/0x210 [ 1491.731049] ? ion_query_heaps+0x360/0x360 [ 1491.735274] do_vfs_ioctl+0x75a/0xff0 [ 1491.739081] ? ioctl_preallocate+0x1a0/0x1a0 [ 1491.743479] ? lock_downgrade+0x740/0x740 [ 1491.747623] ? __fget+0x225/0x360 [ 1491.751154] ? do_vfs_ioctl+0xff0/0xff0 [ 1491.755135] ? security_file_ioctl+0x83/0xb0 [ 1491.759537] SyS_ioctl+0x7f/0xb0 [ 1491.762998] ? do_vfs_ioctl+0xff0/0xff0 [ 1491.766966] do_syscall_64+0x1d5/0x640 [ 1491.770863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1491.776039] RIP: 0033:0x4665d9 [ 1491.779215] RSP: 002b:00007f4124406188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.786918] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1491.794189] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 07:55:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1491.801444] RBP: 00007f41244061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1491.808718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.815994] R13: 00007ffc1c6fe6ff R14: 00007f4124406300 R15: 0000000000022000 [ 1491.859855] CPU: 1 PID: 28665 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1491.866909] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1491.867795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.867800] Call Trace: [ 1491.867819] dump_stack+0x1b2/0x281 [ 1491.889068] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1491.890100] should_fail.cold+0x10a/0x149 [ 1491.890113] should_failslab+0xd6/0x130 07:55:26 executing program 0 (fault-call:2 fault-nth:5): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) [ 1491.897377] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1491.900722] __kmalloc+0x2c1/0x400 [ 1491.900733] ? dma_buf_export+0x20b/0xa20 [ 1491.900742] ? lock_downgrade+0x740/0x740 [ 1491.900751] dma_buf_export+0x20b/0xa20 [ 1491.905019] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1491.910928] ion_alloc+0x5c7/0x810 [ 1491.910941] ? ion_dma_buf_release+0x40/0x40 [ 1491.910954] ? __might_fault+0x177/0x1b0 [ 1491.910965] ion_ioctl+0xea/0x1f0 [ 1491.914805] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 07:55:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x550000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x8d, {0x4, 0x8, 0xfffffffffffffffb, 0xffffffff, 0x6}}) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1491.918620] ? ion_query_heaps+0x360/0x360 [ 1491.918629] ? SyS_write+0x1b7/0x210 [ 1491.918641] ? ion_query_heaps+0x360/0x360 [ 1491.918650] do_vfs_ioctl+0x75a/0xff0 [ 1491.918662] ? ioctl_preallocate+0x1a0/0x1a0 [ 1491.918670] ? lock_downgrade+0x740/0x740 [ 1491.918682] ? __fget+0x225/0x360 [ 1491.922902] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1491.926771] ? do_vfs_ioctl+0xff0/0xff0 [ 1491.926782] ? security_file_ioctl+0x83/0xb0 [ 1491.926790] SyS_ioctl+0x7f/0xb0 [ 1491.926797] ? do_vfs_ioctl+0xff0/0xff0 [ 1491.926808] do_syscall_64+0x1d5/0x640 [ 1491.926822] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1491.926831] RIP: 0033:0x4665d9 [ 1491.926835] RSP: 002b:00007f8427c5a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.926844] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665d9 [ 1491.926850] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1491.926855] RBP: 00007f8427c5a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1491.926860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.926865] R13: 00007ffe0b07524f R14: 00007f8427c5a300 R15: 0000000000022000 [ 1492.006200] FAULT_INJECTION: forcing a failure. [ 1492.006200] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.008657] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1492.017691] CPU: 1 PID: 28675 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1492.022180] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 07:55:27 executing program 0 (fault-call:2 fault-nth:6): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) [ 1492.024721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.024727] Call Trace: [ 1492.024744] dump_stack+0x1b2/0x281 [ 1492.024758] should_fail.cold+0x10a/0x149 [ 1492.024772] should_failslab+0xd6/0x130 [ 1492.024785] kmem_cache_alloc+0x28e/0x3c0 [ 1492.024799] get_empty_filp+0x86/0x3e0 [ 1492.024809] alloc_file+0x23/0x440 [ 1492.024822] anon_inode_getfile+0x163/0x2f0 [ 1492.024830] ? compat_SyS_epoll_pwait+0x240/0x240 [ 1492.024840] ? __lockdep_init_map+0x100/0x560 [ 1492.024856] dma_buf_export+0x4c8/0xa20 [ 1492.024869] ion_alloc+0x5c7/0x810 [ 1492.024883] ? ion_dma_buf_release+0x40/0x40 [ 1492.024897] ? __might_fault+0x177/0x1b0 [ 1492.024911] ion_ioctl+0xea/0x1f0 [ 1492.024919] ? ion_query_heaps+0x360/0x360 [ 1492.024931] ? SyS_write+0x1b7/0x210 [ 1492.038535] ubi0: background thread "ubi_bgt0d" started, PID 28671 [ 1492.039897] ? ion_query_heaps+0x360/0x360 [ 1492.047868] ubi0: detaching mtd0 [ 1492.054412] do_vfs_ioctl+0x75a/0xff0 [ 1492.054424] ? ioctl_preallocate+0x1a0/0x1a0 [ 1492.054432] ? lock_downgrade+0x740/0x740 [ 1492.054445] ? __fget+0x225/0x360 [ 1492.054453] ? do_vfs_ioctl+0xff0/0xff0 [ 1492.054464] ? security_file_ioctl+0x83/0xb0 [ 1492.054472] SyS_ioctl+0x7f/0xb0 [ 1492.054479] ? do_vfs_ioctl+0xff0/0xff0 [ 1492.054493] do_syscall_64+0x1d5/0x640 [ 1492.068474] ubi0: mtd0 is detached [ 1492.069172] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1492.069185] RIP: 0033:0x4665d9 [ 1492.089584] ubi0: attaching mtd0 [ 1492.089716] RSP: 002b:00007f4124406188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.089727] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1492.089736] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1492.098533] ubi0: scanning is finished [ 1492.106779] RBP: 00007f41244061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1492.106785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1492.106789] R13: 00007ffc1c6fe6ff R14: 00007f4124406300 R15: 0000000000022000 [ 1492.148359] FAULT_INJECTION: forcing a failure. [ 1492.148359] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.241022] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1492.257623] CPU: 1 PID: 28680 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1492.278090] ubi0: attaching mtd0 [ 1492.282525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.282530] Call Trace: [ 1492.282549] dump_stack+0x1b2/0x281 [ 1492.282563] should_fail.cold+0x10a/0x149 [ 1492.303131] ubi0: scanning is finished [ 1492.308383] should_failslab+0xd6/0x130 [ 1492.308396] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1492.308409] apparmor_file_alloc_security+0x129/0x800 [ 1492.308424] security_file_alloc+0x66/0xa0 [ 1492.308433] ? selinux_is_enabled+0x5/0x50 [ 1492.308442] get_empty_filp+0x15c/0x3e0 [ 1492.308451] alloc_file+0x23/0x440 [ 1492.308465] anon_inode_getfile+0x163/0x2f0 [ 1492.384700] ? compat_SyS_epoll_pwait+0x240/0x240 [ 1492.389525] ? __lockdep_init_map+0x100/0x560 [ 1492.394014] dma_buf_export+0x4c8/0xa20 [ 1492.397969] ion_alloc+0x5c7/0x810 [ 1492.401674] ? ion_dma_buf_release+0x40/0x40 [ 1492.406069] ? __might_fault+0x177/0x1b0 [ 1492.410110] ion_ioctl+0xea/0x1f0 [ 1492.413543] ? ion_query_heaps+0x360/0x360 [ 1492.417758] ? SyS_write+0x1b7/0x210 [ 1492.421451] ? ion_query_heaps+0x360/0x360 [ 1492.425663] do_vfs_ioctl+0x75a/0xff0 [ 1492.429439] ? ioctl_preallocate+0x1a0/0x1a0 [ 1492.433823] ? lock_downgrade+0x740/0x740 [ 1492.437954] ? __fget+0x225/0x360 [ 1492.441499] ? do_vfs_ioctl+0xff0/0xff0 [ 1492.445537] ? security_file_ioctl+0x83/0xb0 [ 1492.449924] SyS_ioctl+0x7f/0xb0 [ 1492.453273] ? do_vfs_ioctl+0xff0/0xff0 [ 1492.457232] do_syscall_64+0x1d5/0x640 [ 1492.461102] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1492.466294] RIP: 0033:0x4665d9 [ 1492.469460] RSP: 002b:00007f4124406188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.477230] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1492.484482] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1492.491732] RBP: 00007f41244061d0 R08: 0000000000000000 R09: 0000000000000000 [ 1492.498983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1492.506234] R13: 00007ffc1c6fe6ff R14: 00007f4124406300 R15: 0000000000022000 [ 1492.585540] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1492.600761] ubi0: attaching mtd0 [ 1492.612680] ubi0: scanning is finished [ 1492.662110] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1492.669170] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1492.677238] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1492.683933] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1492.690722] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1492.697525] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:55:27 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2b}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfe, {0x2, 0x80, 0x20, 0x7, 0x3, 0x1, 0x0, 0x7, 0x2000}, [@RTA_SRC={0x8, 0x2, @multicast1}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, @RTA_IIF={0x8}, @RTA_PREFSRC={0x8, 0x7, @remote}, @RTA_DST={0x8, 0x1, @multicast2}, @RTA_DST={0x8, 0x1, @private=0xa010100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8047}, 0x40000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0xf, 0xa, 0x3) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) 07:55:27 executing program 3 (fault-call:6 fault-nth:0): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) 07:55:27 executing program 5 (fault-call:3 fault-nth:0): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:27 executing program 2 (fault-call:2 fault-nth:4): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:27 executing program 0 (fault-call:2 fault-nth:7): perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='bond0\x00') preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/79, 0x4f}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000140)=""/152, 0x98}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000500)=""/140, 0x8c}], 0x6, 0xffff8000, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) [ 1492.705530] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1492.715498] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1492.725265] ubi0: background thread "ubi_bgt0d" started, PID 28704 [ 1492.725759] ubi: mtd0 is already attached to ubi0 [ 1492.736582] ubi: mtd0 is already attached to ubi0 [ 1492.743789] ubi0: detaching mtd0 [ 1492.758743] ubi0: mtd0 is detached 07:55:27 executing program 0: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000040)=0x8) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x8}, 0xc) read(r1, &(0x7f0000000100)=""/4096, 0x1000) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) [ 1492.831831] ubi0: attaching mtd0 [ 1492.838163] FAULT_INJECTION: forcing a failure. [ 1492.838163] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.862364] ubi0: scanning is finished [ 1492.872215] FAULT_INJECTION: forcing a failure. [ 1492.872215] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.898264] CPU: 1 PID: 28719 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1492.906190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.915553] Call Trace: [ 1492.918163] dump_stack+0x1b2/0x281 [ 1492.921806] should_fail.cold+0x10a/0x149 [ 1492.925958] should_failslab+0xd6/0x130 [ 1492.929939] kmem_cache_alloc_node+0x263/0x410 [ 1492.934537] __alloc_skb+0x5c/0x510 [ 1492.938165] netlink_sendmsg+0x901/0xb80 [ 1492.942223] ? nlmsg_notify+0x170/0x170 [ 1492.946193] ? kernel_recvmsg+0x210/0x210 [ 1492.950355] ? security_socket_sendmsg+0x83/0xb0 [ 1492.955106] ? nlmsg_notify+0x170/0x170 [ 1492.959071] sock_sendmsg+0xb5/0x100 [ 1492.962828] ___sys_sendmsg+0x6c8/0x800 [ 1492.966947] ? get_pid_task+0x91/0x130 [ 1492.970837] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1492.975605] ? lock_downgrade+0x740/0x740 [ 1492.979755] ? __fget+0x1fe/0x360 [ 1492.983237] ? lock_acquire+0x170/0x3f0 [ 1492.987209] ? lock_downgrade+0x740/0x740 [ 1492.991355] ? __fget+0x225/0x360 [ 1492.994802] ? __fdget+0x196/0x1f0 [ 1492.998333] ? sockfd_lookup_light+0xb2/0x160 [ 1493.002850] __sys_sendmsg+0xa3/0x120 [ 1493.006643] ? SyS_shutdown+0x160/0x160 [ 1493.010610] ? wait_for_completion_io+0x10/0x10 [ 1493.015281] ? SyS_read+0x210/0x210 [ 1493.018944] SyS_sendmsg+0x27/0x40 [ 1493.022473] ? __sys_sendmsg+0x120/0x120 [ 1493.026611] do_syscall_64+0x1d5/0x640 07:55:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) lseek(0xffffffffffffffff, 0x800, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)='bond0\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f00000000c0)=""/123, 0x7b}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x3, 0x5cc6cea9, 0x7fff) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000000)={0x0, 0x80000000, [0x1f, 0x7, 0xc764, 0x7fff, 0x8000]}) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001280)=@generic, 0x80, &(0x7f0000003580)=[{&(0x7f0000001300)=""/96, 0x60}, {&(0x7f0000000180)=""/44, 0x2c}, {&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000001400)=""/109, 0x6d}, {&(0x7f00000014c0)=""/163, 0xa3}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000001380)=""/31, 0x1f}], 0x8}, 0x100) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) [ 1493.030581] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1493.035773] RIP: 0033:0x4665d9 [ 1493.038955] RSP: 002b:00007f26de320188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1493.046655] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1493.053913] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1493.061173] RBP: 00007f26de3201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1493.068430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.075690] R13: 00007ffd54199d9f R14: 00007f26de320300 R15: 0000000000022000 [ 1493.113145] CPU: 1 PID: 28721 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1493.121077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1493.130523] Call Trace: [ 1493.133118] dump_stack+0x1b2/0x281 [ 1493.136751] should_fail.cold+0x10a/0x149 [ 1493.139027] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1493.140898] should_failslab+0xd6/0x130 [ 1493.140933] kmem_cache_alloc+0x28e/0x3c0 [ 1493.140945] SyS_epoll_ctl+0x770/0x2780 07:55:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = epoll_create1(0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x30000004}) dup(r4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)={0x4}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r7, &(0x7f0000000100)={0x30000004}) r8 = dup(r2) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r9, &(0x7f0000000180)={0x10002018}) epoll_pwait(r8, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000000)={0xfff, 0x0, 0x1}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0xffffffff, 0x20}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x80000002}) [ 1493.148265] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1493.151690] ? __mutex_unlock_slowpath+0x75/0x770 [ 1493.151702] ? SyS_epoll_create+0x170/0x170 [ 1493.151712] ? vfs_write+0x319/0x4d0 [ 1493.151722] ? fput+0xb/0x140 [ 1493.151731] ? SyS_write+0x14d/0x210 [ 1493.151739] ? SyS_read+0x210/0x210 [ 1493.151750] ? __do_page_fault+0x159/0xad0 [ 1493.151759] ? do_syscall_64+0x4c/0x640 [ 1493.151767] ? SyS_epoll_create+0x170/0x170 [ 1493.151777] do_syscall_64+0x1d5/0x640 [ 1493.151792] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1493.156690] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1493.159890] RIP: 0033:0x4665d9 [ 1493.159895] RSP: 002b:00007f198b951188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1493.159904] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1493.159909] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000004 [ 1493.159914] RBP: 00007f198b9511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1493.159919] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1493.159925] R13: 00007ffcb2095e1f R14: 00007f198b951300 R15: 0000000000022000 [ 1493.174142] FAULT_INJECTION: forcing a failure. [ 1493.174142] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.181872] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1493.197992] CPU: 1 PID: 28735 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1493.291354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1493.300690] Call Trace: [ 1493.303263] dump_stack+0x1b2/0x281 [ 1493.306872] should_fail.cold+0x10a/0x149 [ 1493.311005] should_failslab+0xd6/0x130 [ 1493.314974] kmem_cache_alloc+0x28e/0x3c0 [ 1493.319104] __d_alloc+0x2a/0xa20 [ 1493.322553] anon_inode_getfile+0x101/0x2f0 [ 1493.326866] ? compat_SyS_epoll_pwait+0x240/0x240 [ 1493.331697] ? __lockdep_init_map+0x100/0x560 [ 1493.336170] ? __lockdep_init_map+0x100/0x560 [ 1493.340646] dma_buf_export+0x4c8/0xa20 [ 1493.344602] ion_alloc+0x5c7/0x810 [ 1493.348127] ? ion_dma_buf_release+0x40/0x40 [ 1493.352516] ? __might_fault+0x177/0x1b0 [ 1493.356556] ion_ioctl+0xea/0x1f0 [ 1493.359989] ? ion_query_heaps+0x360/0x360 [ 1493.364212] ? SyS_write+0x1b7/0x210 [ 1493.367906] ? ion_query_heaps+0x360/0x360 [ 1493.372119] do_vfs_ioctl+0x75a/0xff0 [ 1493.375901] ? ioctl_preallocate+0x1a0/0x1a0 [ 1493.380289] ? lock_downgrade+0x740/0x740 [ 1493.384418] ? __fget+0x225/0x360 [ 1493.387851] ? do_vfs_ioctl+0xff0/0xff0 [ 1493.391809] ? security_file_ioctl+0x83/0xb0 [ 1493.396209] SyS_ioctl+0x7f/0xb0 [ 1493.399580] ? do_vfs_ioctl+0xff0/0xff0 [ 1493.403550] do_syscall_64+0x1d5/0x640 [ 1493.407422] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1493.412592] RIP: 0033:0x4665d9 [ 1493.415764] RSP: 002b:00007f8427c7b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1493.423453] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1493.430715] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1493.437966] RBP: 00007f8427c7b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1493.445231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.452499] R13: 00007ffe0b07524f R14: 00007f8427c7b300 R15: 0000000000022000 07:55:28 executing program 5 (fault-call:3 fault-nth:1): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1493.461522] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1493.469484] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1493.478490] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1493.488318] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1493.498683] ubi0: background thread "ubi_bgt0d" started, PID 28734 07:55:28 executing program 3 (fault-call:6 fault-nth:1): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) 07:55:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12704}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x10001, 0x101800) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) [ 1493.523934] ubi: mtd0 is already attached to ubi0 [ 1493.529040] ubi0: detaching mtd0 [ 1493.545039] ubi0: mtd0 is detached [ 1493.550680] ubi0: attaching mtd0 [ 1493.557842] ubi0: scanning is finished [ 1493.559755] FAULT_INJECTION: forcing a failure. [ 1493.559755] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.584337] CPU: 1 PID: 28740 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1493.592264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1493.600860] FAULT_INJECTION: forcing a failure. [ 1493.600860] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.601618] Call Trace: [ 1493.601637] dump_stack+0x1b2/0x281 [ 1493.601653] should_fail.cold+0x10a/0x149 [ 1493.601666] should_failslab+0xd6/0x130 [ 1493.601684] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1493.632362] __kmalloc_node_track_caller+0x38/0x70 [ 1493.637289] __alloc_skb+0x96/0x510 [ 1493.640917] netlink_sendmsg+0x901/0xb80 [ 1493.644984] ? nlmsg_notify+0x170/0x170 [ 1493.648961] ? kernel_recvmsg+0x210/0x210 [ 1493.653116] ? security_socket_sendmsg+0x83/0xb0 [ 1493.657872] ? nlmsg_notify+0x170/0x170 [ 1493.661869] sock_sendmsg+0xb5/0x100 [ 1493.665595] ___sys_sendmsg+0x6c8/0x800 [ 1493.669568] ? get_pid_task+0x91/0x130 [ 1493.673460] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1493.678215] ? lock_downgrade+0x740/0x740 [ 1493.682367] ? __fget+0x1fe/0x360 [ 1493.685820] ? lock_acquire+0x170/0x3f0 [ 1493.689798] ? lock_downgrade+0x740/0x740 [ 1493.693950] ? __fget+0x225/0x360 [ 1493.697400] ? __fdget+0x196/0x1f0 [ 1493.700941] ? sockfd_lookup_light+0xb2/0x160 [ 1493.705434] __sys_sendmsg+0xa3/0x120 [ 1493.709235] ? SyS_shutdown+0x160/0x160 [ 1493.713219] ? wait_for_completion_io+0x10/0x10 [ 1493.717891] ? SyS_read+0x210/0x210 [ 1493.721515] SyS_sendmsg+0x27/0x40 [ 1493.725049] ? __sys_sendmsg+0x120/0x120 [ 1493.729102] do_syscall_64+0x1d5/0x640 [ 1493.732971] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1493.738148] RIP: 0033:0x4665d9 [ 1493.741330] RSP: 002b:00007f26de320188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1493.749022] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1493.756272] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1493.763523] RBP: 00007f26de3201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1493.770775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.778040] R13: 00007ffd54199d9f R14: 00007f26de320300 R15: 0000000000022000 [ 1493.786129] CPU: 0 PID: 28747 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1493.794587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1493.803936] Call Trace: [ 1493.806528] dump_stack+0x1b2/0x281 [ 1493.810161] should_fail.cold+0x10a/0x149 [ 1493.814314] should_failslab+0xd6/0x130 [ 1493.818313] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1493.822984] wakeup_source_create+0x3c/0xc0 [ 1493.827312] wakeup_source_register+0x12/0x40 [ 1493.831810] ep_create_wakeup_source+0x19a/0x280 [ 1493.836568] ? ep_ptable_queue_proc+0x370/0x370 [ 1493.841236] ? SyS_epoll_ctl+0x770/0x2780 [ 1493.845390] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1493.850850] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1493.855868] ? kmem_cache_alloc+0x35f/0x3c0 [ 1493.860202] SyS_epoll_ctl+0x17fe/0x2780 [ 1493.864276] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1493.869321] ? SyS_epoll_create+0x170/0x170 [ 1493.873740] ? check_preemption_disabled+0x35/0x240 [ 1493.878763] ? retint_kernel+0x2d/0x2d [ 1493.882631] ? SyS_epoll_create+0x170/0x170 [ 1493.886954] ? SyS_epoll_create+0x170/0x170 [ 1493.891258] do_syscall_64+0x1d5/0x640 [ 1493.895125] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1493.900294] RIP: 0033:0x4665d9 [ 1493.903465] RSP: 002b:00007f198b951188 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1493.911242] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1493.918497] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000004 [ 1493.925754] RBP: 00007f198b9511d0 R08: 0000000000000000 R09: 0000000000000000 [ 1493.933020] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1493.940271] R13: 00007ffcb2095e1f R14: 00007f198b951300 R15: 0000000000022000 07:55:28 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x4, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "72ee5a127207", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x85}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x146}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x550000) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) 07:55:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x410003, 0x41) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0xff, 0x8, 0x2, 0x0, 0x100000001, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x2, @perf_config_ext={0x5, 0x4}, 0x2408, 0x401, 0x8, 0x6, 0x100000000, 0x3738, 0x8331, 0x0, 0x10001, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r2, 0x1) ioctl$int_in(r1, 0x5421, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0xff, 0x81, 0x20, 0x20, 0x0, 0x3, 0x90484, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x10000, 0x7, 0x5, 0x4, 0x2, 0x5, 0x3, 0x0, 0x1a, 0x0, 0x2}) 07:55:28 executing program 5 (fault-call:3 fault-nth:2): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:28 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40041, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) write$cgroup_type(r0, &(0x7f0000000180), 0x9) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x2428, r1, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x10e4, 0x5, 0x0, 0x1, [{0x604, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x2b0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf0}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x44}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x188, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd9d}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdfc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3e}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x99c3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x198, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa4f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x36}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x144, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3c}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0xec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xedba}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2f1a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}]}, {0x218, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x20c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xce}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xec}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8b}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x200, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x88, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8ec3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x103}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbfa0}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x2ec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x288, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x39}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2a72}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x95}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xb1c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x128, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x90, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x134, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x130, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}]}, {0x124, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x70, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x730, 0x5, 0x0, 0x1, [{0x220, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xd4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xcc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x29}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x321}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x90}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x3c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb3c}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf001}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xe0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x12b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x99}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x99c, 0x5, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x1c8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xbc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfe00}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7e0}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x70}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15ba}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xed}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xb9b18db2c14739aa}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x110, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x50, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x420, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x398}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x32b0}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x354, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x104, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb7d}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}]}, {0xa0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x6c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x60}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}, @NL80211_PMSR_ATTR_PEERS={0x264, 0x5, 0x0, 0x1, [{0x260, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xd8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x78}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbd68}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}]}, 0x2428}, 0x1, 0x0, 0x0, 0x4004081}, 0x24000100) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000001c0)='bond0\x00') epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='bond0\x00') write(r2, &(0x7f00000001c0)="b7a84f4f7aa6703857f6ee9abc8414d9636413feed5df17920b55214c695277d30cbf4dd3ee12a0fd768c7544064b4048ad40e4c231368b9a4a033c7d9605197d787729d1bd66d3e27cc66c1491cbd6bf45fcf062120d81389638207c7f567887656fab09077e67a11cc5c07667753402180f1560b71e859f6d17a3bb5ea070a", 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) [ 1494.014967] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:55:28 executing program 3 (fault-call:6 fault-nth:2): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) 07:55:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="5b0000000000000000000600000008000300980d0402813c9fad4dbc8366ece336766d92402d6cd0533cf4665690ea83b46fdd612cd457abae1aae030d1e69ee6e5b9935a68524f4582073b3af0f07849c654a613736a26c75e83ec780c98e732b1814e1e24f8d44834ed1aa2dbca56d514d1152c24a7a5fcd63a19b35d291a5f5d09012062e9e0941a6a9dd315f132f8a0913d03e56b801ce61a6368b42f35f974aef0a82b4a0363bab6a5daaf3", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x14000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="cdc300000000000000b88e3f5d00"], 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x40040) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x550000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40046f41, 0x76006e) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000640)=""/209, 0xd1}], 0x1, 0xffff8000, 0x1) [ 1494.079525] FAULT_INJECTION: forcing a failure. [ 1494.079525] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.110572] CPU: 0 PID: 28765 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1494.118497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.127858] Call Trace: [ 1494.130452] dump_stack+0x1b2/0x281 [ 1494.134094] should_fail.cold+0x10a/0x149 [ 1494.138247] should_failslab+0xd6/0x130 [ 1494.142228] kmem_cache_alloc_node+0x263/0x410 [ 1494.146818] __alloc_skb+0x5c/0x510 [ 1494.150458] netlink_ack+0x216/0x9a0 [ 1494.154180] ? netlink_sendmsg+0xb80/0xb80 [ 1494.157547] ubi0: attaching mtd0 [ 1494.158416] netlink_rcv_skb+0x2c5/0x390 [ 1494.165881] ? genl_family_rcv_msg+0xb20/0xb20 [ 1494.170472] ? netlink_ack+0x9a0/0x9a0 [ 1494.174359] ? lock_acquire+0x170/0x3f0 [ 1494.178334] genl_rcv+0x24/0x40 [ 1494.181613] netlink_unicast+0x437/0x610 [ 1494.185149] ubi0: scanning is finished [ 1494.185688] ? netlink_sendskb+0xd0/0xd0 [ 1494.185699] ? __check_object_size+0x179/0x230 [ 1494.185711] netlink_sendmsg+0x62e/0xb80 [ 1494.185725] ? nlmsg_notify+0x170/0x170 [ 1494.185733] ? kernel_recvmsg+0x210/0x210 [ 1494.185747] ? security_socket_sendmsg+0x83/0xb0 [ 1494.215216] ? nlmsg_notify+0x170/0x170 [ 1494.219183] sock_sendmsg+0xb5/0x100 [ 1494.222891] ___sys_sendmsg+0x6c8/0x800 [ 1494.226864] ? get_pid_task+0x91/0x130 [ 1494.230744] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1494.235503] ? lock_downgrade+0x740/0x740 [ 1494.239653] ? __fget+0x1fe/0x360 [ 1494.243102] ? lock_acquire+0x170/0x3f0 [ 1494.247205] ? lock_downgrade+0x740/0x740 [ 1494.251361] ? __fget+0x225/0x360 [ 1494.254948] ? __fdget+0x196/0x1f0 [ 1494.258493] ? sockfd_lookup_light+0xb2/0x160 [ 1494.263003] __sys_sendmsg+0xa3/0x120 [ 1494.266802] ? SyS_shutdown+0x160/0x160 [ 1494.270783] ? wait_for_completion_io+0x10/0x10 [ 1494.275469] ? SyS_read+0x210/0x210 [ 1494.279110] SyS_sendmsg+0x27/0x40 [ 1494.282639] ? __sys_sendmsg+0x120/0x120 [ 1494.286691] do_syscall_64+0x1d5/0x640 [ 1494.290572] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1494.295769] RIP: 0033:0x4665d9 [ 1494.298948] RSP: 002b:00007f26de320188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1494.306650] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1494.313997] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1494.321258] RBP: 00007f26de3201d0 R08: 0000000000000000 R09: 0000000000000000 07:55:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3, 0x2, 0x1f, 0x7f, 0x0, 0x33, 0x101, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7f6, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x469}, 0x0, 0x4b, 0x10000, 0x3, 0x4, 0x0, 0x8001, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r1, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:29 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf7, 0x7, 0x80, 0x40, 0x0, 0x0, 0x98109, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x5}, 0x10000, 0x40d7270d, 0x4, 0x0, 0xffffffffffffff81, 0x800, 0x1, 0x0, 0x6, 0x0, 0xff}, 0xffffffffffffffff, 0xf, r1, 0x9) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000100)={0x30000004}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f00000001c0)='bond0\x00') sendmsg$unix(r4, &(0x7f0000000580)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000280)="70b5e4bb74931ddf631df60cda5ecb4f6d82265a7d6bc5f8595c58529510588b2428e706a96416b74109b0e4a628436befb1d417431cbfae990ff952ee6df5cfe15cbf5ee02a8d2d066f882bd3f51ff59297c44eee4465c8b26360c0ab5515cdafae0be50fe40b0e6adff96994f597355310d2c75f4a723d8a450f3382215fac2db48ac756fc7f79ae32a70ae592468894f622916884fff910d7e54b199ca64892ef09c3", 0xa4}, {&(0x7f0000000340)="9b5de45ec926c30f9b11c6fa8657dfb22694f1d7ea3b01a93140fbb16fe49ff7f7b8484dad3e64a453986dfc6615abe0a2bf5a73c9515289d096f20fdf04272d256e5d205b172d5f015f7b159ec70ca21ea594c8f5c4a7cbb27d5c1888bc9dfe4d3ad05f2ab5636df3670e128724e93168c2125d5844854c36d0e9f280819510ae906b557112f51f683d937e5b7a7c4e84ff5e29c38d8e7d8fc4452a06218cbfc4aecef435041e6deb2cf8b1104a28518b62c496e5a490ce3c060dcd1dff2a4a", 0xc0}, {&(0x7f00000001c0)="4b86111306dd4a20cdf35c221cce6a085e072ded53c98c9a7507d2d35f7e9e4d27317f89bcb658999006e03907ae8576f73fdf0aad718c8ea38a264384fef63e9d7d16028f9a", 0x46}, {&(0x7f0000000000)="a93b62c52436782862f3b646e424", 0xe}, {&(0x7f0000000400)="66da4965174bb7620b7a29305e770c5f6578640a8c35ae1572d8e4df2b911d71870af6da4a10206a3e152bacccf7c83f715dad043752947e5f9f997a2d6e0bc8dc24787838bfcd11216aaff7f80ff41f4a1e83", 0x53}, {&(0x7f0000000480)="0e4252ac10c2535f931d99ef497a473fed73d022521830de656461f3ab58311e62c2ba8af6015a99cb43ab679cd08e48bb62b23833dee6d668cae5fc2d1928bc8fa97ad7c3dea010b326a46708b4a958d170436fdf3b", 0x56}], 0x6, 0x0, 0x0, 0x40000}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x5, 0x3, 0x100, 0xcef, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x40) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) [ 1494.328523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.335794] R13: 00007ffd54199d9f R14: 00007f26de320300 R15: 0000000000022000 07:55:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='bond0\x00') close(r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = epoll_create1(0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x0, 0x6, {0x0}, {0xffffffffffffffff}, 0xad9, 0x101}) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x2, 0x5, 0x7f, 0x7, 0x0, 0x20, 0x44000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000180), 0x5}, 0x2277, 0x0, 0xfff, 0x0, 0xfffffffffffff000, 0x10001, 0x5929, 0x0, 0x3, 0x0, 0x2}, r4, 0x0, r0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000100)={0x30000004}) r7 = dup(r3) epoll_pwait(r7, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4, 0x4, 0x7, 0x0, 0x0, 0x100000000, 0x12100, 0xeb81de7858fff27b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x42000, 0xff, 0xfbe, 0x1, 0x2, 0x487, 0x40, 0x0, 0x4bc, 0x0, 0x81}, 0x0, 0x9, r7, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000000000), 0x20, 0x4200) openat$cgroup_ro(r8, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:29 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x30000004}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x2010, r4, 0xe14a0000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)) r5 = openat$cgroup_ro(r0, &(0x7f0000000000)='devices.list\x00', 0x0, 0x0) openat(r5, &(0x7f0000000140)='./file0\x00', 0x0, 0x46) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_wait(r6, &(0x7f00000001c0)=[{}, {}], 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) 07:55:29 executing program 5 (fault-call:3 fault-nth:3): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1494.482314] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1494.503778] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1494.520649] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1494.531089] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1494.541435] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1494.561771] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1494.570655] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1494.585020] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1494.595968] ubi0: background thread "ubi_bgt0d" started, PID 28793 [ 1494.602861] FAULT_INJECTION: forcing a failure. [ 1494.602861] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.615960] ubi: mtd0 is already attached to ubi0 [ 1494.616420] CPU: 1 PID: 28801 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1494.628760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.638125] Call Trace: [ 1494.641477] dump_stack+0x1b2/0x281 [ 1494.641491] should_fail.cold+0x10a/0x149 [ 1494.649366] should_failslab+0xd6/0x130 [ 1494.653353] kmem_cache_alloc_node_trace+0x25a/0x400 [ 1494.658504] __kmalloc_node_track_caller+0x38/0x70 [ 1494.658517] __alloc_skb+0x96/0x510 [ 1494.667088] netlink_ack+0x216/0x9a0 [ 1494.670924] ? netlink_sendmsg+0xb80/0xb80 [ 1494.675179] netlink_rcv_skb+0x2c5/0x390 [ 1494.679244] ? genl_family_rcv_msg+0xb20/0xb20 [ 1494.683825] ? netlink_ack+0x9a0/0x9a0 [ 1494.687727] ? lock_acquire+0x170/0x3f0 [ 1494.691707] genl_rcv+0x24/0x40 [ 1494.694983] netlink_unicast+0x437/0x610 [ 1494.699056] ? netlink_sendskb+0xd0/0xd0 [ 1494.703121] ? __check_object_size+0x179/0x230 [ 1494.707710] netlink_sendmsg+0x62e/0xb80 [ 1494.711792] ? nlmsg_notify+0x170/0x170 [ 1494.715768] ? kernel_recvmsg+0x210/0x210 [ 1494.719962] ? security_socket_sendmsg+0x83/0xb0 [ 1494.724749] ? nlmsg_notify+0x170/0x170 [ 1494.728826] sock_sendmsg+0xb5/0x100 [ 1494.732543] ___sys_sendmsg+0x6c8/0x800 [ 1494.736538] ? get_pid_task+0x91/0x130 [ 1494.740427] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1494.745222] ? lock_downgrade+0x740/0x740 [ 1494.749389] ? __fget+0x1fe/0x360 [ 1494.752843] ? lock_acquire+0x170/0x3f0 [ 1494.756910] ? lock_downgrade+0x740/0x740 [ 1494.761149] ? __fget+0x225/0x360 [ 1494.764628] ? __fdget+0x196/0x1f0 [ 1494.768198] ? sockfd_lookup_light+0xb2/0x160 [ 1494.772813] __sys_sendmsg+0xa3/0x120 [ 1494.776615] ? SyS_shutdown+0x160/0x160 [ 1494.780603] ? wait_for_completion_io+0x10/0x10 [ 1494.785351] ? SyS_read+0x210/0x210 [ 1494.788974] SyS_sendmsg+0x27/0x40 [ 1494.792514] ? __sys_sendmsg+0x120/0x120 [ 1494.796570] do_syscall_64+0x1d5/0x640 [ 1494.800443] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1494.805617] RIP: 0033:0x4665d9 [ 1494.808799] RSP: 002b:00007f26de320188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1494.816507] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1494.823757] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1494.831013] RBP: 00007f26de3201d0 R08: 0000000000000000 R09: 0000000000000000 [ 1494.838265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.845513] R13: 00007ffd54199d9f R14: 00007f26de320300 R15: 0000000000022000 [ 1494.853262] ubi0: detaching mtd0 [ 1494.872453] ubi0: mtd0 is detached [ 1494.880170] ubi0: attaching mtd0 [ 1494.898382] ubi0: scanning is finished 07:55:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xff, 0xff, 0x9, 0x9, 0x0, 0x4, 0x50020, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x401, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x1a02, 0x2, 0x3, 0x0, 0x2, 0x7, 0x2, 0x0, 0x5, 0x0, 0xdd}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xde, 0x4, 0x5, 0x0, 0x0, 0xb4, 0x80010, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x61, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x1a55, 0x9, 0x9, 0x9, 0x8, 0x4, 0x8, 0x0, 0x9, 0x0, 0x3}, 0xffffffffffffffff, 0x2, r0, 0xa) 07:55:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) 07:55:29 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x6, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000180)="e41c07ff626f0e8c607e53e1ca4df43382a70a14ade9649d6fc425b02d803df87ba8c12b80530d29d84db1bdf1603fc3caf46cd384254fd0473a4e0e2207192d0d9a15db9bb6b00fd414094003f372c107e56a0781fdf8cbbf27554847c1740f346a5b68412a37ab83223f5912365da3e9c6ed98868f5ffd8570be4a36e5d17f361c1b9435615704ec8e", 0x8a, 0x3}, {&(0x7f0000000280)="56aae4c89df1e9a0a59dbdce3d0f6fe929da3b5553e58189e25b9b07f1ca19a85940d1cd949fb5527c2db78b8e17aec04e12e97df1c3d8cff552db813fbd560dcc78abfd1dcf45035d1f1b70d23c4ab19f3c2892ef9f83ed8816ca48beef03d872209f5ec2019a86364abc6b944be12c7a72e270368deb90817e8c1f44eedc4623922459a7c6ba169df352108c5e92452adb4d7b72ff6d3df344d98fd677d1f795d18178e91186a9f32259bfe53b5c5291481b7bf39ca48711c9ce7b1ae334f2e78b00e523cd1d2a1c4bf2b983c2cd1f09a6c59b0c7947fc294d18", 0xdb, 0x7}, {&(0x7f0000000380)="74a817494ec6175190bcfb7884859e1167b00a590a4b5c565d206c4ebccefc686f0a2170165c0878823049ed64e561b6d45fc2c3e0f2d917ffe3d96c5a537d0fb60ba9c2c15ebb464b6457f5a153fadf769bc8331e0df706dda24add80aec37119e7a025359c291596876e29e3d2198fe486d25013018322b8fb77042e63cb11449487847f6ca738fb2b2e8f97b046b4", 0x90, 0xfa}, {&(0x7f0000000440)="dbd5bf96a24a4b7e260f19ef33d6f4b0f2ddcc56e3a1d265653da3f338821bf76a2a81a1b9f46222d896647e8f6971a302c545b1e50d9e4e39f8c21fbcf109861c95dcadb712452efe3196392da2aece8f35a5c751fae7ee70f3b02d9c7efd163faeb64474291d54aeffaae80b21da7b9942eca8544f2c11c7b641219b77d442f0fcbe4378f171958dff", 0x8a, 0x40}, {&(0x7f0000000500)="5c56e3d70426ba30442a66487b76a30af549506938d2588d830748215fc057e9a0c5afe650e0425446e39d155882c1fade6740936605fbc5b88ecb423cc373ca149cca58a67a3fa512c49094e2afe28f05397cfd588278bbf0b89f41f1f50be7ed583e06669879090e61c7423fecf54737f1f0188176154992a3cf526d19f3847fe4b434c96fe9e8e9e485b275f0b033da225c4dcf823582a7", 0x99, 0xff}], 0x204800, &(0x7f0000000740)=ANY=[@ANYBLOB="6a6465763d2e2f66696c65302c646174613d6a6f75726e616c2c67727071756f74612c626c6f636b2d616c6c6f6361746f723d6e6f626f726465722c66756e633d425084085f434845434b2c686173682c7365636c6162656c2c6162656c2c657569643c00000000", @ANYRESDEC, @ANYBLOB="2c646566636f6e746578743d757365725f7525d0a4fb2c6895a8ec9151fc27cc3d", @ANYRESDEC=0xee00, @ANYBLOB=',smackfsdef=/dev/ion\x00,dont_hash,\x00']) r4 = syz_open_procfs(0x0, &(0x7f0000000640)='net/udplite\x00') ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000680)={0x2, 0x3d, 0x1}) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0), 0x0) 07:55:29 executing program 5 (fault-call:3 fault-nth:4): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r1, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) 07:55:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x550000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="809dab0e32cc3395da80298a7a63207e0dbb058a3c65e3e51746f86260bdcb809fc121e98d922bd22838fc87701cf48f88062bb537af4ed341f0cca76d09af662c9bb8e5b824a1a68a435a458aa5f8d762304ad650f30e3feb19afa11a6be8d1006a94047e34", 0x66}], 0x1, &(0x7f0000000900)=[{0x1010, 0x108, 0x5, "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"}, {0x48, 0x11, 0x9, "5f7c004d2773744edb07f6aec53858019938701174654a29177e552f5fd2809118016e6e6e1b249e7db0b634eb20c440e14026d1"}, {0xd0, 0x109, 0x3, "99be3e9750559268ab33dc59c2c2f185d2071e8ea454025a86e034956397b1f0c2ff1567283dfef35541ae2a04409868834467b075fdd15557e94342d3dcfe97fd2fc4bb621b09c4744cada486391661fdbf3752d91111d1cdf268d6834ca2161a583ec09ed7caab95dd903cf3c93dee0a16e83ce6a705e34d9c07baee563ed0723c49b7cd7502899d563c98b94d0316fc41a7347b54e63ccf426fc79bc8613a56c562908d8b49593eb9ab57e274d9f721b44072f763e2b6a967"}, {0x88, 0x1e8, 0xffffff2d, "c689eda4c24475e5508325a4108b329cbf7ccc3b893b401f707029331d9c25a6cad1d4a7fc5a5690696f4b141b1671d46c776483b8243427f2f17dcd5fa4bac0b6ba6ae95a69c67ac5d7892458b7e8714ffde24803b9ee9f13a00c106d56962708015d04917d1ddb4c006b74c82e70a5f6b5291b"}, {0x1010, 0x10e, 0x7473, "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"}], 0x21c0}, 0x80) 07:55:29 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0500000000000000000006000000080003009ddf5995fbad74116b8b62f86363551e73e805ece95fb230449860d6c55317a42e4e7f1ef84fae21260d6644b3b02fc554bdc18439e66c962d9ce37038938b54a9fef7b862e79c84d2d4842cc2b715e98a514c84eed6303ef2e289edc3f647e0a71a7e91ed0991b0b4f9756066e0da3c4a358cb2e34c3f5f9c7a604980fdf4ed62ff19174c5054574b92", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x13c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x80000001}, {0x8, 0x0, 0x100}, {0x8, 0x0, 0x7}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680), 0xc, &(0x7f0000000900)={&(0x7f0000000740)={0x19c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x5c}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "52046a49fc61bee459eeb4135f7b2194af3757c774a08a38"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "37773f662f5e2008f7a76045492c6f631a62aeb46c908ea0"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "05e119d91e14785c9a4930db0a9eebe3e1cd354fba9a3772"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "35d1fb1f626c792a526c12301979f7195b08e01d7b51455c"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "639b09d51c938ee5c7e11954bf986b980132875714a8c3f8"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_4ADDR={0x5}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)='bond0\x00') ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000540)=0x2) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0xb13, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xffff, 0x54}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}}, 0x90) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="64165195000000", @ANYRES16=r6, @ANYBLOB="08002bbd7000ffdbdf25510000000c00990000000000010000000a000600080211000000000005008a00000000000a000600080211000000000005008a000300000005008a000200000005008a00010000000a0006000802110000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x7704, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) [ 1494.954580] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1495.015807] ubi0: attaching mtd0 07:55:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r2, 0xb1bb88e7390f040d, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x68}}, 0x0) [ 1495.058103] ubi0: scanning is finished 07:55:30 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x105001, 0x0) ioctl$CHAR_RAW_FLSBUF(r0, 0x1261, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x1, 0x9d, 0x0, 0x10001, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x1, 0x8}) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x1f, 0x8}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x7, 0x0, 0x0, 0x0, 0x401, 0xc0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x2, 0x7, 0x0, 0x7, 0xa7, 0x9, 0x0, 0x4b4c, 0x0, 0xdf7d}, r2, 0xffffffffffffffff, r3, 0x9) 07:55:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x7c, r1, 0xb1bb88e7390f040d, 0x3, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "81a6d5f9c1b729f24ecb2ed1b0d425ad"}]}]}, 0x7c}}, 0x4000) [ 1495.116058] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "func=BP„_CHECK" 07:55:30 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x6}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000000}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x2, 0x5, {0xffffffffffffffff}, {}, 0xfffffffffffffffd}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x7, 0x80, 0x1, 0x0, 0x0, 0x100000000, 0x818, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x4, 0x800}, 0x9, 0x40, 0x1, 0x5, 0x23, 0x1, 0x8, 0x0, 0x7fff, 0x0, 0x40}, r2, 0x3, r0, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x6) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f00000001c0), 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000200)='-]\x00') ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x840006, 0xb}) 07:55:30 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) sendto$unix(r0, &(0x7f0000000140), 0x0, 0x890, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80240, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x64c0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xf0000014}) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) [ 1495.211459] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1495.222336] kasan: CONFIG_KASAN_INLINE enabled 07:55:30 executing program 3: restart_syscall() openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)) dup2(r2, r0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x1f, 0x8}, 0x0) r4 = epoll_create1(0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x30000004}) r7 = dup(r4) epoll_pwait(r7, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x3, 0x94, 0x3, 0xff, 0x0, 0x8, 0x80001, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3b20, 0x1, @perf_config_ext={0x1554, 0x7}, 0xc100, 0x2, 0x1000, 0x8, 0x6, 0x438, 0x3, 0x0, 0x2, 0x0, 0x2}, 0x0, 0x2, r7, 0x9) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) [ 1495.252421] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1495.264026] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1495.272519] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1495.294018] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1495.300329] Modules linked in: [ 1495.303523] CPU: 0 PID: 28856 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1495.311408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.320760] task: ffff88803d1442c0 task.stack: ffff888092708000 [ 1495.326819] RIP: 0010:ieee802154_llsec_parse_dev_addr+0x275/0x320 [ 1495.333042] RSP: 0018:ffff88809270f4b0 EFLAGS: 00010247 [ 1495.338403] RAX: dffffc0000000000 RBX: 0000000000000002 RCX: ffffc9000af1f000 [ 1495.345689] RDX: 0000000000000000 RSI: ffffffff86dae840 RDI: 0000000000000004 07:55:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x63b7262d9b8baed7) 07:55:30 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000180)=0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x30000004}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10803, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)={0x2, 0x0, '\x00', [@ra={0x5, 0x2, 0xcfb}, @enc_lim={0x4, 0x1, 0x5}]}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) [ 1495.352989] RBP: ffff88809270f658 R08: 0000000000000001 R09: ffff88809270f4e0 [ 1495.357347] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1495.360269] R10: ffff88809270f50f R11: ffff88803d1442c0 R12: 1ffff110124e1e96 [ 1495.360274] R13: 0000000000000000 R14: ffff8880aadf32d8 R15: 0000000000000000 [ 1495.360282] FS: 00007f26de320700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 1495.360287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1495.360291] CR2: 00007ffe3248c507 CR3: 00000000a5af5000 CR4: 00000000001406f0 07:55:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xe1, 0x6, 0x7, 0x20, 0x0, 0x7, 0x1446, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x4, 0xfff}, 0x1c030, 0xffffffff, 0x7, 0x1, 0x7, 0x200, 0x6, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r1, 0x3) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x30000004}) r2 = dup(0xffffffffffffffff) epoll_pwait(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000002680)={0x2, 0xc, 0x1}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000100)=""/69, 0x45}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f00000001c0)=""/83, 0x53}], 0x3, 0x9, 0x10000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f00000001c0)='bond0\x00') vmsplice(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)="989658202fb6afdfc5d8526cad6d3025b6fb6cd329aa151d108928fb4d07969f135708f84fa98a662777bf026fd4c33bace5807b9481455aab575cc665bc5916bb2bec0fbc3cf14e1a77b8b966e11c18f4bcf4ff841f18b5ecd0e3d446eb7bb40bbb75e02553e95fa20758b73466db92335eb862f049dbef0cbc00d0335b5e9f1122e79eb5bd0ec83d56782c39aa77dfa9368ecd4c5115f1546a477eb4d38a18775f7acd04", 0xa5}, {&(0x7f0000000380)="56492820bafed589536ba593a02d29e029294abf4a5ec32b02748603a857adbfae28aa6d9ecaca680bfa00bdabacaf1f019ad6be1c3f3d832db00e0299f5ab6ee46af0e7", 0x44}], 0x2, 0xe) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) read$FUSE(r5, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0x0, r6, 0x0) syz_mount_image$v7(&(0x7f00000000c0), &(0x7f0000000140)='./file0/file0\x00', 0x100000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="34b77c2ed6a0cfbcee130bd1", 0xc, 0x5}], 0x0, &(0x7f0000000280)={[{'\'(*@'}, {'&)'}], [{@smackfsroot={'smackfsroot', 0x3d, 'sit0\x00'}}, {@fowner_lt={'fowner<', r6}}]}) syz_mount_image$f2fs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x6da47496, 0x9, &(0x7f0000000b00)=[{&(0x7f00000004c0)="c42cb442f9303c3a03d0cf2a4bad6e4352a085af86880082311be75e542be96ed39f5a3c2a6be9c4fb2d794f3c0ee34478670139e49e07339629602e3fcbdf195dadea15cc5055da9802bf5cab53b043a80292e0a16d07c5c25f0df0064b98c781332263d8ddcaa2e95ec8b9d8045e512befffb2d2f89900276a871fff186c575aae86d91c19785d4bc9f418d68bf9650adc7420c9f14b1e1b07dc9bc819cb6138b36fd4898696cc9d5bb9afb1c09f2c43ef7029199e98c8bbe9732206a9e0d4f3a2e78a1bc3e1008020ab1f00a5fc02846d26734a22471a70ee057d713276ce", 0xe0, 0x2}, {&(0x7f00000005c0)="d41a05698769c048768195ffc5c8a75f38e7a8c017b7ac46a8ac4a1ffa0d90b4a38c784672889c5ffbea2627cd2fd7b6c8a22fc118ba428be43071ace37b8c8229fa990a7d3f95cff618b5cb12b39bcdd48b2ebc3876f4b0d47586b1ce10c209accc2c81815df67bbedf350057c239807b91936e93865568ce53322b8e2da904a7d91968053fb0d6ffeef9f224d3aca0054fcedf444d594ab9fd824cc6188f51b0bb525797dc3c0aba72d167403ffe36915108bdf39df6a4af52dbbf4966b56d002ad67cbcc01b032a033f0c2708ef622900", 0xd2, 0x2}, {&(0x7f00000006c0)="38ffef405d75fd37daded011d8c3b7a911491b14c4c63bc0aab6ae796b52baed56efb5a5281eac5f91d069d3814725bb2445cde2eace545b2786abfc2896ea28a0aae0be10266b8a3a5c2ec4c00f590657d4f48c99d75a1cae8779031d354b7efd84fde5ea6f143af5523dc4b2afeef9c99b61943b9087c1862e2d67f848739932d7da986d52173a9e1c77a8d19897", 0x8f, 0x15}, {&(0x7f0000000780)="bfa86b3530d8d63feb9478f987ff74834b61beb941f499", 0x17, 0x4}, {&(0x7f00000007c0)="2b35c2c077bd30291faa9f49351d90bd719b33c81d1b53319ec221febb31651fc3e8d91c809662bb5568685ce633", 0x2e, 0x5}, {&(0x7f0000000800)="69474d394db2e5bb61b66d7b2f5f37c7820859e3855d26a3e405d3924b88c9b4eb20fe4dc67e38b2c239f77524a261fdd02a451b11589822372d3c23878a9ecf850464b7c5c9cb0f7f96743cc8676d6b31ed4ca95d6e94195668819af2b6e1355dbdc8c22d", 0x65, 0x1}, {&(0x7f0000000880)="2774ae7e356da0e34da93f5f10507ad8da3d5aa67aa91a37d0ec24f8470831898529fad0aff7297dea9e8acb31130e65a2c7efb6962740bff42f329ca240cd8afee35f332e5418414373fecc7150c9502a8f051af4d28fd3c0661362a7d03ec717b30d7a79fcccd9c92c1bbd5d3e995725cfcd3eb752ff1f385f6b5be9b85e91fccaf001931004051448d2cdcbf36fcc90145b9dde8cde79359e69b4a86d10106b6201a5ebbfb01b8d7fdd73e90aba145549c83c0733df59d17e504b7791a5d9e119670d02456ab74a49cbffcb528aa73177faf8d90c35ff8de2bfd8623664ce759048916c7ba9140aa18914753403", 0xef, 0x7fff}, {&(0x7f0000000980)="ad9d7abc2146caaa9beecafdd5585857fb2d0750316f5ae0ca0544c056f9254af596c45323d78b3b8291ecd312cc64078ebfa1c92065b5911a5592ce52f71ce4a22f6b6db5ff68698d2872ecde2d12695f9e0ff0acc9ab57c55a1123f33dae1f9817688a6649abe5ffb2090938291d0ed14563f94c16e5", 0x77, 0x100000000}, {&(0x7f0000000a00)="a2648daff8eec65bde54fd3536ffc598520f3904c93bcf9930194198d32ca72de5e6ad93e27891868c387f91ceb6631d65ca16623ca8e1945ccc21bbe6e0586b8a67628f8a1835f0d716c1856d305289f81ab46ddb3403410caa37836133e32dd94904fc64eb1672814df8905b94629d68eac9f268f70f336187f5b1d8bab4f7c6ef5deacbe3b032d49d666633862f75d4d3415fc1f5d8163364a2b51ed3a61fd633e0ca8928e57e832b0215ea9c1437a28db9fc8160fb13c6206071d877842ad15acf205f95", 0xc6, 0xe5}], 0x10000, &(0x7f0000002540)=ANY=[@ANYBLOB='discard,resuid=', @ANYRESHEX=r6, @ANYBLOB="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"]) [ 1495.360299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1495.360303] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1495.360306] Call Trace: [ 1495.360325] ? wpan_phy_sysfs_exit+0x20/0x20 [ 1495.406377] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1495.410536] ? validate_nla+0x192/0x5e0 [ 1495.410544] ? nla_parse+0x157/0x1f0 [ 1495.410559] ieee802154_llsec_parse_key_id+0x2f4/0x3a0 [ 1495.410567] ? ieee802154_llsec_parse_dev_addr+0x320/0x320 [ 1495.410578] ? nla_parse+0x157/0x1f0 [ 1495.429471] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1495.430868] nl802154_add_llsec_key+0x27f/0x4f0 [ 1495.430880] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1495.430888] ? __cfg802154_wpan_dev_from_attrs+0x450/0x450 [ 1495.430898] ? __save_stack_trace+0x63/0x160 [ 1495.435411] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 1638204267 [ 1495.438573] ? rtnl_is_locked+0x5/0x20 [ 1495.438588] ? lock_downgrade+0x740/0x740 [ 1495.438598] ? nl802154_pre_doit+0xb2/0xb20 07:55:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "275c0dbfc74a5a5449ae092b20d040d920dff6f795de6489"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fc789fee1ff627ae96b26f68b1c75e6d65c952cc20d24053"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x78}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r3, 0x35, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0b}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000041}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x124, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@tim={0x5, 0x29, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd27"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x20}}, @random={0x2}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xb7, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0x97, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40186f40, 0x550000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)) ioctl$ASHMEM_GET_SIZE(r6, 0x40046f41, 0x76006e) [ 1495.438606] ? validate_nla+0x192/0x5e0 [ 1495.438616] ? nla_parse+0x157/0x1f0 [ 1495.448092] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1495.449479] genl_family_rcv_msg+0x572/0xb20 [ 1495.449490] ? genl_rcv+0x40/0x40 [ 1495.449500] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1495.449511] ? trace_hardirqs_on+0x10/0x10 [ 1495.449517] ? sock_sendmsg+0xb5/0x100 [ 1495.449528] genl_rcv_msg+0xaf/0x140 [ 1495.461152] ubi0: detaching mtd0 [ 1495.465132] netlink_rcv_skb+0x125/0x390 [ 1495.465141] ? genl_family_rcv_msg+0xb20/0xb20 [ 1495.465150] ? netlink_ack+0x9a0/0x9a0 [ 1495.465158] ? lock_acquire+0x170/0x3f0 [ 1495.465167] genl_rcv+0x24/0x40 [ 1495.465175] netlink_unicast+0x437/0x610 [ 1495.465187] ? netlink_sendskb+0xd0/0xd0 [ 1495.480838] ubi0: mtd0 is detached [ 1495.489912] ? __check_object_size+0x179/0x230 [ 1495.489924] netlink_sendmsg+0x62e/0xb80 [ 1495.489935] ? nlmsg_notify+0x170/0x170 [ 1495.489941] ? kernel_recvmsg+0x210/0x210 [ 1495.489952] ? security_socket_sendmsg+0x83/0xb0 07:55:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) read$FUSE(r1, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setresuid(0x0, r2, 0x0) syz_mount_image$v7(&(0x7f00000000c0), &(0x7f0000000140)='./file0/file0\x00', 0x100000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="34b77c2ed6a0cfbcee130bd1", 0xc, 0x5}], 0x0, &(0x7f0000000280)={[{'\'(*@'}, {'&)'}], [{@smackfsroot={'smackfsroot', 0x3d, 'sit0\x00'}}, {@fowner_lt={'fowner<', r2}}]}) syz_mount_image$v7(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)="ba08b4f050655f8ef2d4f94dbc2d4ff34b9fe94e0b1d72f072e90e4a0bd0c8b1633ed0c256d923160a77aa231c42b14ec3424945eac7eb4ae5cd654a1aa2862ae2016cadc7638d28418958d13714ffc8770bcb90a8830af63472a96611987a7e60c8585ab899f4388d6d48a22573fee6001227a1d0a9c365efc791c939949fab3ac09ad1ea62f1ce0d95fb24e89f21ceee79a09e48d0f55f6456bef18218e0c9ec8a4455655035d254caed73d979b6f1293e9ce15d10eeefdc7b16018243a85ab6efd914108859b9dca4198bb618b8349277da1cfc943034f1d00816e0c694c8ec36d8bd06d1fca6151b", 0xea, 0x40}], 0x38c8000, &(0x7f0000002540)={[{'&-\\w'}, {'wlan0\x00'}, {'k,['}, {}, {}, {'/dev/ubi_ctrl\x00'}, {'wlan0\x00'}, {'wl\x01\x04\xc2\rS\'\xc0'}, {'.'}], [{@smackfshat={'smackfshat', 0x3d, '!\''}}, {@audit}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@obj_user={'obj_user', 0x3d, 'wlan0\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '))'}}, {@smackfsdef}, {@euid_eq={'euid', 0x3d, r2}}]}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) openat(r1, &(0x7f00000002c0)='./file0/file0/file0\x00', 0x80000, 0x7e839df27f1f4eeb) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x1b8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x9b, 0x2a, [@tim={0x5, 0x35, {0x1f, 0x43, 0x4, "e4493288918c5cc376ff18afb9a180f5f4cfb0560960b74f1c55ca99f156df32046d645fcd2729125e9b1f2148bac818b36e"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x20}}, @random={0x2, 0x55, "ca10fa05dfbcf0c1bac8cc69ddca0892ef757699eb37f4d7d7ab9cf23d014133109b99ff6c07dac2d69d89f5620f5b138fe7a393294fd32acbebc59d65861bbba979699b08c73c2a6ec208d2c28f1d474f19dc0b61"}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xe9, 0x2a, [@mic={0x8c, 0x18, {0xa1, "73ee5a127217", @long="361554fbc134b53c3005ca9524c58771"}}, @random={0x6b, 0xc9, "13cf8579b5ad2953f5b6a59a20aae13397454a320a62d506ae52e0c43b56b9ab08eeb02789f2185427f6f353aee3b4a2b5aaa2ef4836f10a87dc7c2c5941aab6be878a3e6603bff7bf575299a94618ba2ce44b9c731b341bae84b412b7404559256ecf70a8334dd78a54ffbc8fa903702b49a108f6ac0ef38d555fe2261fc2bbf48eee262f447ac487ae36d28407e93f8d26912cdc34e0ef410246d88990180552e9a58c69e63d443b92a2286226691108bf085f2c4a61cb30657c18249f6800241bb9df3a1525ec3e"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x24044814}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5c3fded4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x550000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) [ 1495.489960] ? nlmsg_notify+0x170/0x170 [ 1495.489969] sock_sendmsg+0xb5/0x100 [ 1495.608318] ___sys_sendmsg+0x6c8/0x800 [ 1495.612381] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 1495.617142] ? do_futex+0x12b/0x1570 [ 1495.620860] ? __fget+0x1fe/0x360 [ 1495.624312] ? lock_acquire+0x170/0x3f0 [ 1495.624745] ubi0: attaching mtd0 [ 1495.628282] ? lock_downgrade+0x740/0x740 [ 1495.628293] ? __fget+0x225/0x360 [ 1495.628303] ? __fdget+0x196/0x1f0 [ 1495.628313] ? sockfd_lookup_light+0xb2/0x160 [ 1495.628323] __sys_sendmsg+0xa3/0x120 [ 1495.651031] ? SyS_shutdown+0x160/0x160 [ 1495.655010] ? security_file_ioctl+0x83/0xb0 [ 1495.655319] ubi0: scanning is finished [ 1495.659409] ? fput+0xb/0x140 [ 1495.659421] SyS_sendmsg+0x27/0x40 [ 1495.659428] ? __sys_sendmsg+0x120/0x120 [ 1495.659437] do_syscall_64+0x1d5/0x640 [ 1495.659448] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1495.659457] RIP: 0033:0x4665d9 [ 1495.688299] RSP: 002b:00007f26de320188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1495.696017] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1495.703281] RDX: 0000000000004000 RSI: 0000000020000100 RDI: 0000000000000004 [ 1495.710550] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1495.717815] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1495.725076] R13: 00007ffd54199d9f R14: 00007f26de320300 R15: 0000000000022000 [ 1495.732339] Code: 00 00 48 83 ec 80 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 30 3d 7a fa 49 8d 7f 04 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 04 84 d2 75 67 [ 1495.751474] RIP: ieee802154_llsec_parse_dev_addr+0x275/0x320 RSP: ffff88809270f4b0 07:55:30 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create1(0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000080)={0x800006, 0xb, 0x0, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x30000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x3000001b}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)) getgroups(0x1, &(0x7f0000000280)=[0xee00]) r6 = socket(0x10, 0x2, 0x1000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000040)='./file0\x00', 0xee00, r7) r8 = socket(0x10, 0x2, 0x1000) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000040)='./file0\x00', 0xee00, r9) getgroups(0x7, &(0x7f00000002c0)=[0xee01, 0x0, 0xee01, 0x0, 0xee01, r5, 0xee00]) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010002000000000002008b3c", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee01, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=0xee01, @ANYBLOB="04000a000000000008000100", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080002008f4c1813b8642828d7b738823fef9a26083e1fba011d81524e3be5d9c411f9b1769af51fb3e35a08", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB="10000500000000002000000000000000"], 0x7c, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0), 0x0) [ 1495.780931] ---[ end trace d563a3ddc94dc7bf ]--- [ 1495.786249] Kernel panic - not syncing: Fatal exception [ 1495.792442] Kernel Offset: disabled [ 1495.796062] Rebooting in 86400 seconds..