apter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:12 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x0, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  861.399890] ubi: mtd0 is already attached to ubi0
[  861.426090] ubi: mtd0 is already attached to ubi0
22:04:13 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:13 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x0, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:13 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x0, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  861.692202] ubi: mtd0 is already attached to ubi0
22:04:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:13 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  861.756827] ubi: mtd0 is already attached to ubi0
[  861.885351] ubi: mtd0 is already attached to ubi0
22:04:13 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  861.961333] ubi: mtd0 is already attached to ubi0
22:04:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  862.155155] ubi: mtd0 is already attached to ubi0
22:04:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x0, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:13 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:13 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040), 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x0, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  862.365345] ubi: mtd0 is already attached to ubi0
[  862.544710] ubi: mtd0 is already attached to ubi0
22:04:14 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:14 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0x0, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x0, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  862.706025] ubi: mtd0 is already attached to ubi0
22:04:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x0, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  862.747698] ubi: mtd0 is already attached to ubi0
22:04:14 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0x0, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  862.970249] ubi: mtd0 is already attached to ubi0
22:04:14 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040), 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000f4e50000000000000000"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x0, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:14 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  863.076561] ubi: mtd0 is already attached to ubi0
[  863.159910] ubi: mtd0 is already attached to ubi0
22:04:14 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0x0, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x0, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:14 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  863.431824] ubi: mtd0 is already attached to ubi0
22:04:14 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x0, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  863.518194] ubi: mtd0 is already attached to ubi0
22:04:15 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  863.608899] ubi: mtd0 is already attached to ubi0
[  863.674833] ubi: mtd0 is already attached to ubi0
22:04:15 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040), 0x0)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  863.911024] ubi: mtd0 is already attached to ubi0
22:04:15 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:15 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:15 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:15 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x0, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:15 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  864.564670] ubi: mtd0 is already attached to ubi0
22:04:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:16 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:16 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  864.862942] ubi: mtd0 is already attached to ubi0
[  865.082035] ubi: mtd0 is already attached to ubi0
22:04:16 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:16 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
syz_open_pts(r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:16 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0x0, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:16 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  865.265823] ubi: mtd0 is already attached to ubi0
22:04:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:16 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
syz_open_pts(r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:16 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0x0, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  865.431227] ubi: mtd0 is already attached to ubi0
[  865.475659] ubi: mtd0 is already attached to ubi0
22:04:16 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x0, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  865.611970] ubi: mtd0 is already attached to ubi0
[  865.703490] ubi: mtd0 is already attached to ubi0
22:04:17 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:17 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
syz_open_pts(r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:17 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0x0, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x0, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  865.951349] ubi: mtd0 is already attached to ubi0
[  866.024552] ubi: mtd0 is already attached to ubi0
22:04:17 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="06", 0x1)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:17 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:17 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, 0x0)

22:04:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:17 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, 0x0)

[  866.227849] ubi: mtd0 is already attached to ubi0
22:04:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:17 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, 0x0)

22:04:18 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:18 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x0, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
syz_open_pts(r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:18 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

[  866.744542] ubi: mtd0 is already attached to ubi0
[  866.767250] ubi: mtd0 is already attached to ubi0
22:04:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
syz_open_pts(r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:18 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

22:04:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:18 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:18 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x0, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  866.914373] ubi: mtd0 is already attached to ubi0
22:04:18 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

22:04:18 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x0, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  866.948640] ubi: mtd0 is already attached to ubi0
[  867.124374] ubi: mtd0 is already attached to ubi0
22:04:18 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
syz_open_pts(r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:18 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x0, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:18 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17})

22:04:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x0, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  867.373071] ubi: mtd0 is already attached to ubi0
22:04:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, 0x0)

[  867.415031] ubi: mtd0 is already attached to ubi0
[  867.523902] ubi: mtd0 is already attached to ubi0
[  867.634528] ubi: mtd0 is already attached to ubi0
22:04:19 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x0, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:19 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:19 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  867.794493] ubi: mtd0 is already attached to ubi0
[  867.845523] ubi: mtd0 is already attached to ubi0
[  867.862250] ubi: mtd0 is already attached to ubi0
22:04:19 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, 0x0)

22:04:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x0, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:19 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x0, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:19 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x0, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  868.110247] ubi: mtd0 is already attached to ubi0
22:04:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x0, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  868.179849] ubi: mtd0 is already attached to ubi0
22:04:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, 0x0)

22:04:19 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0x0, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  868.313483] ubi: mtd0 is already attached to ubi0
[  868.428835] ubi: mtd0 is already attached to ubi0
[  868.542058] ubi: mtd0 is already attached to ubi0
22:04:20 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:20 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

[  868.758200] ubi: mtd0 is already attached to ubi0
22:04:20 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, 0x0)

22:04:20 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:20 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

22:04:20 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:20 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x0, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:20 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  869.119570] ubi: mtd0 is already attached to ubi0
22:04:20 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x0, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  869.142888] ubi: mtd0 is already attached to ubi0
22:04:20 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  869.315899] ubi: mtd0 is already attached to ubi0
[  869.368239] ubi: mtd0 is already attached to ubi0
22:04:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

22:04:21 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x0, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:21 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:21 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x0, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  869.694571] ubi: mtd0 is already attached to ubi0
22:04:21 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  869.749548] ubi: mtd0 is already attached to ubi0
22:04:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17})

22:04:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x0, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  869.915370] ubi: mtd0 is already attached to ubi0
22:04:21 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  869.978585] ubi: mtd0 is already attached to ubi0
22:04:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17})

22:04:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x0, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  870.123116] ubi: mtd0 is already attached to ubi0
22:04:21 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  870.192348] ubi: mtd0 is already attached to ubi0
[  870.387004] ubi: mtd0 is already attached to ubi0
22:04:21 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:21 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x0, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:21 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

22:04:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x0, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  870.578341] ubi: mtd0 is already attached to ubi0
22:04:22 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  870.617660] ubi: mtd0 is already attached to ubi0
22:04:22 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

[  870.784382] ubi: mtd0 is already attached to ubi0
22:04:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x0, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:22 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  870.817123] ubi: mtd0 is already attached to ubi0
[  870.998584] ubi: mtd0 is already attached to ubi0
[  871.018883] ubi: mtd0 is already attached to ubi0
22:04:22 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:22 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

22:04:22 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x0, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:22 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:22 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  871.431687] ubi: mtd0 is already attached to ubi0
22:04:22 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  871.488249] ubi: mtd0 is already attached to ubi0
22:04:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x0, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  871.610880] ubi: mtd0 is already attached to ubi0
22:04:23 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:23 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  871.674039] ubi: mtd0 is already attached to ubi0
[  871.769990] ubi: mtd0 is already attached to ubi0
[  871.840827] ubi: mtd0 is already attached to ubi0
22:04:23 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[], 0x0)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:23 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, 0x0, 0x0)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x0, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:23 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:23 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x0, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:23 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:23 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  872.332583] ubi: mtd0 is already attached to ubi0
22:04:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:23 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x0, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  872.367628] ubi: mtd0 is already attached to ubi0
22:04:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x0, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:24 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  872.568947] ubi: mtd0 is already attached to ubi0
[  872.596401] ubi: mtd0 is already attached to ubi0
22:04:24 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x0, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  872.754751] ubi: mtd0 is already attached to ubi0
[  872.864446] ubi: mtd0 is already attached to ubi0
22:04:24 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[], 0x0)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:24 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x0, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:24 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x0, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:24 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:24 executing program 4:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  873.165815] ubi: mtd0 is already attached to ubi0
22:04:24 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[], 0x0)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  873.207673] ubi: mtd0 is already attached to ubi0
22:04:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  873.229298] ubi: mtd0 is already attached to ubi0
22:04:24 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x0, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:24 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  873.393798] ubi: mtd0 is already attached to ubi0
22:04:24 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  873.446604] ubi: mtd0 is already attached to ubi0
[  873.616327] ubi: mtd0 is already attached to ubi0
22:04:25 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:25 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x0, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:25 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[], 0x0)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:25 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:25 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  874.036634] ubi: mtd0 is already attached to ubi0
22:04:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  874.105476] ubi: mtd0 is already attached to ubi0
22:04:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x0, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:25 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  874.267437] ubi: mtd0 is already attached to ubi0
22:04:25 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  874.431682] ubi: mtd0 is already attached to ubi0
22:04:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0x0, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  874.496585] ubi: mtd0 is already attached to ubi0
22:04:26 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  874.643052] ubi: mtd0 is already attached to ubi0
22:04:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  874.827870] ubi: mtd0 is already attached to ubi0
22:04:26 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  874.882449] ubi: mtd0 is already attached to ubi0
22:04:26 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:26 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x0, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  875.129406] ubi: mtd0 is already attached to ubi0
22:04:26 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:26 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x0, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  875.159448] ubi: mtd0 is already attached to ubi0
[  875.166502] ubi: mtd0 is already attached to ubi0
22:04:26 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  875.328715] ubi: mtd0 is already attached to ubi0
22:04:26 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  875.365578] ubi: mtd0 is already attached to ubi0
[  875.403151] ubi: mtd0 is already attached to ubi0
[  875.526772] ubi: mtd0 is already attached to ubi0
22:04:27 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:27 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:27 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x0, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:27 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:27 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:27 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:27 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  875.808741] ubi: mtd0 is already attached to ubi0
22:04:27 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x0, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:27 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  875.852827] ubi: mtd0 is already attached to ubi0
22:04:27 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:27 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  876.021066] ubi: mtd0 is already attached to ubi0
[  876.033089] ubi: mtd0 is already attached to ubi0
22:04:27 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  876.203511] ubi: mtd0 is already attached to ubi0
22:04:28 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:28 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:28 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:28 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x0, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:28 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x0, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:28 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  876.686140] ubi: mtd0 is already attached to ubi0
[  876.698798] ubi: mtd0 is already attached to ubi0
[  876.748139] ubi: mtd0 is already attached to ubi0
22:04:28 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:28 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  876.906152] ubi: mtd0 is already attached to ubi0
22:04:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x0, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  876.957009] ubi: mtd0 is already attached to ubi0
[  877.131158] ubi: mtd0 is already attached to ubi0
22:04:28 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa"], 0xa6)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:28 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x0, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:28 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x0, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:28 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x0, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:29 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  877.548402] ubi: mtd0 is already attached to ubi0
[  877.613627] ubi: mtd0 is already attached to ubi0
22:04:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x0, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:29 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  877.649321] ubi: mtd0 is already attached to ubi0
22:04:29 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x0, 0x7})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:29 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa"], 0xa6)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x0, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  877.912170] ubi: mtd0 is already attached to ubi0
22:04:29 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:29 executing program 2:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x0, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  878.018453] ubi: mtd0 is already attached to ubi0
22:04:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x0, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  878.131182] ubi: mtd0 is already attached to ubi0
[  878.256073] ubi: mtd0 is already attached to ubi0
22:04:29 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:29 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa"], 0xa6)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:29 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x0, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:29 executing program 2:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:29 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  878.483951] ubi: mtd0 is already attached to ubi0
22:04:29 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x0, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:30 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:30 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc747"], 0xf9)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x0, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:30 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe})
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  878.684612] ubi: mtd0 is already attached to ubi0
22:04:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x0, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  878.763974] ubi: mtd0 is already attached to ubi0
22:04:30 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe})
syz_open_pts(r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:30 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc747"], 0xf9)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  878.918037] ubi: mtd0 is already attached to ubi0
22:04:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x0, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  879.090875] ubi: mtd0 is already attached to ubi0
22:04:30 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:30 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe})
syz_open_pts(r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:30 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc747"], 0xf9)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:30 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x0, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  879.328095] ubi: mtd0 is already attached to ubi0
22:04:30 executing program 2:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:30 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x0, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:30 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe})
syz_open_pts(r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:30 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7"], 0x122)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:30 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:31 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, 0x0)

22:04:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x0, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x0, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  879.637781] ubi: mtd0 is already attached to ubi0
22:04:31 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x122)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x0, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  879.745461] ubi: mtd0 is already attached to ubi0
22:04:31 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, 0x0)

22:04:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x0, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  879.861475] ubi: mtd0 is already attached to ubi0
22:04:31 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:31 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x122)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  879.966763] ubi: mtd0 is already attached to ubi0
22:04:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x0, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:31 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, 0x0)

[  880.165271] ubi: mtd0 is already attached to ubi0
22:04:31 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, 0x0, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x0, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:31 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x137)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:31 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

22:04:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  880.379205] ubi: mtd0 is already attached to ubi0
[  880.397681] ubi: mtd0 is already attached to ubi0
22:04:31 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x0, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:31 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100))

[  880.524367] ubi: mtd0 is already attached to ubi0
[  880.565930] ubi: mtd0 is already attached to ubi0
22:04:32 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:32 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x137)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:32 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:32 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x0, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:32 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, 0x0, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  880.799851] ubi: mtd0 is already attached to ubi0
22:04:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:32 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x0, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  880.830396] ubi: mtd0 is already attached to ubi0
22:04:32 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:32 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x137)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  880.999495] ubi: mtd0 is already attached to ubi0
22:04:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  881.059176] ubi: mtd0 is already attached to ubi0
22:04:32 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x0, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  881.142512] ubi: mtd0 is already attached to ubi0
22:04:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x0, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:32 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  881.248225] ubi: mtd0 is already attached to ubi0
22:04:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:32 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000"], 0x141)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  881.309547] ubi: mtd0 is already attached to ubi0
[  881.402776] ubi: mtd0 is already attached to ubi0
[  881.511187] ubi: mtd0 is already attached to ubi0
22:04:33 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, 0x0, 0x0)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:33 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x0, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:33 executing program 4:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:33 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:33 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x141)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:33 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  881.767377] ubi: mtd0 is already attached to ubi0
[  881.795428] ubi: mtd0 is already attached to ubi0
22:04:33 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000"], 0x141)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:33 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  881.965964] ubi: mtd0 is already attached to ubi0
[  881.985326] ubi: mtd0 is already attached to ubi0
22:04:33 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x146)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  882.152612] ubi: mtd0 is already attached to ubi0
[  882.192277] ubi: mtd0 is already attached to ubi0
22:04:33 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x0, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:33 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:33 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000f4e5000000"], 0x146)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:33 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x0, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  882.479732] ubi: mtd0 is already attached to ubi0
22:04:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  882.538892] ubi: mtd0 is already attached to ubi0
22:04:34 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  882.628481] ubi: mtd0 is already attached to ubi0
22:04:34 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x146)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  882.667192] ubi: mtd0 is already attached to ubi0
22:04:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x0, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  882.776816] ubi: mtd0 is already attached to ubi0
[  882.830584] ubi: mtd0 is already attached to ubi0
[  882.899727] ubi: mtd0 is already attached to ubi0
[  882.977047] ubi: mtd0 is already attached to ubi0
22:04:34 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x0, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:34 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x149)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  883.285166] ubi: mtd0 is already attached to ubi0
22:04:34 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x0, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  883.325228] ubi: mtd0 is already attached to ubi0
[  883.490627] ubi: mtd0 is already attached to ubi0
22:04:35 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:35 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:35 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x149)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x0, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:35 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:35 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  883.746198] ubi: mtd0 is already attached to ubi0
22:04:35 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x0, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  883.775787] ubi: mtd0 is already attached to ubi0
[  883.790925] ubi: mtd0 is already attached to ubi0
22:04:35 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:35 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x149)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  883.906831] ubi: mtd0 is already attached to ubi0
22:04:35 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  883.946968] ubi: mtd0 is already attached to ubi0
22:04:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x0, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  884.065728] ubi: mtd0 is already attached to ubi0
[  884.150237] ubi: mtd0 is already attached to ubi0
22:04:35 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:35 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14a)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:35 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x0, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x0, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:35 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, 0x0)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  884.334949] ubi: mtd0 is already attached to ubi0
22:04:35 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0x0, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  884.378158] ubi: mtd0 is already attached to ubi0
22:04:35 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14a)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0x0, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  884.533373] ubi: mtd0 is already attached to ubi0
[  884.676314] ubi: mtd0 is already attached to ubi0
22:04:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0x0, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:36 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, 0x0)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:36 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14a)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0x0, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  884.857452] ubi: mtd0 is already attached to ubi0
[  884.900523] ubi: mtd0 is already attached to ubi0
22:04:36 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x0, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0x0, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x0, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:36 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:36 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  885.135599] ubi: mtd0 is already attached to ubi0
22:04:36 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x400180)
syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x2)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[  885.190745] ubi: mtd0 is already attached to ubi0
22:04:36 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  885.233145] ubi: mtd0 is already attached to ubi0
[  885.265247] ubi: mtd0 is already attached to ubi0
22:04:36 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000f4e50000000000000000"], 0xe)
sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  885.397649] ubi: mtd0 is already attached to ubi0
22:04:37 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, 0x0)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x0, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:37 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:37 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(0xffffffffffffffff, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  885.802324] ubi: mtd0 is already attached to ubi0
22:04:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x0, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  885.824322] ubi: mtd0 is already attached to ubi0
22:04:37 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  886.039693] ubi: mtd0 is already attached to ubi0
22:04:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x0, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:37 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000f4e50000000000000000"], 0xe)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  886.268320] ubi: mtd0 is already attached to ubi0
22:04:37 executing program 4:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x400180)
syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x2)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

22:04:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x0, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:37 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000f4e50000000000000000"], 0xe)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:37 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x400180)
syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x2)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

22:04:37 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  886.637279] ubi: mtd0 is already attached to ubi0
22:04:38 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x0, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:38 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:38 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, 0x0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  886.931584] ubi: mtd0 is already attached to ubi0
[  886.990929] ubi: mtd0 is already attached to ubi0
22:04:38 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, 0x0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:38 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000f4e50000000000000000"], 0xe)
sendfile(r0, r0, 0x0, 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:38 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:38 executing program 4:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x400180)
syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x2)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

22:04:39 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x400180)
syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x2)
socket$inet6(0xa, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

22:04:39 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  887.663931] ubi: mtd0 is already attached to ubi0
22:04:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:39 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  887.980203] ubi: mtd0 is already attached to ubi0
22:04:39 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:39 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:39 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x0, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:39 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:39 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  888.456596] ubi: mtd0 is already attached to ubi0
22:04:39 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x0, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:39 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  888.493720] ubi: mtd0 is already attached to ubi0
22:04:40 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:40 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  888.622840] ubi: mtd0 is already attached to ubi0
22:04:40 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0x0, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  888.683093] ubi: mtd0 is already attached to ubi0
[  888.775403] ubi: mtd0 is already attached to ubi0
22:04:40 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x0, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  888.899676] ubi: mtd0 is already attached to ubi0
[  888.924733] ubi: mtd0 is already attached to ubi0
22:04:40 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:40 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0x0, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:40 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x0, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:40 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  889.175908] ubi: mtd0 is already attached to ubi0
[  889.237224] ubi: mtd0 is already attached to ubi0
22:04:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x0, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:40 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0x0, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:40 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x0, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:40 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000f4e50000000000000000"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x400180)
syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x2)
socket$inet6(0xa, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)

22:04:40 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:40 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  889.594927] ubi: mtd0 is already attached to ubi0
22:04:41 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x0, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  889.620191] ubi: mtd0 is already attached to ubi0
[  889.671604] ubi: mtd0 is already attached to ubi0
[  889.850936] ubi: mtd0 is already attached to ubi0
[  889.898512] ubi: mtd0 is already attached to ubi0
22:04:41 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x0, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  890.138316] ubi: mtd0 is already attached to ubi0
22:04:41 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  890.204493] ubi: mtd0 is already attached to ubi0
22:04:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:41 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:41 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x0, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  890.390754] ubi: mtd0 is already attached to ubi0
22:04:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  890.414967] ubi: mtd0 is already attached to ubi0
22:04:41 executing program 2:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x400180)
syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x2)
r2 = socket$inet6(0xa, 0x3, 0x2)
dup(r2)

[  890.556011] ubi: mtd0 is already attached to ubi0
22:04:42 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:42 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:42 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:42 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  890.837766] ubi: mtd0 is already attached to ubi0
22:04:42 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x8, 0x0, [{0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:42 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  890.875292] ubi: mtd0 is already attached to ubi0
22:04:42 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  891.042299] ubi: mtd0 is already attached to ubi0
22:04:42 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  891.224507] ubi: mtd0 is already attached to ubi0
[  891.292001] ubi: mtd0 is already attached to ubi0
22:04:42 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:42 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:42 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:42 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:42 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x0, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:42 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:42 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  891.558874] ubi: mtd0 is already attached to ubi0
[  891.646434] ubi: mtd0 is already attached to ubi0
22:04:43 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x0, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  891.673771] ubi: mtd0 is already attached to ubi0
22:04:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  891.827533] ubi: mtd0 is already attached to ubi0
[  891.844592] ubi: mtd0 is already attached to ubi0
22:04:43 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x0, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  892.151961] ubi: mtd0 is already attached to ubi0
22:04:43 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:43 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x0, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:43 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000f4e50000000000000000"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:43 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:43 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:43 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x0, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  892.421275] ubi: mtd0 is already attached to ubi0
[  892.433822] ubi: mtd0 is already attached to ubi0
[  892.572614] ubi: mtd0 is already attached to ubi0
22:04:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:44 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x0, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  892.621082] ubi: mtd0 is already attached to ubi0
[  892.746654] ubi: mtd0 is already attached to ubi0
22:04:44 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x0, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  892.773406] ubi: mtd0 is already attached to ubi0
[  892.897756] ubi: mtd0 is already attached to ubi0
[  892.988547] ubi: mtd0 is already attached to ubi0
22:04:44 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:44 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:44 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000f4e50000000000000000"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  893.178692] ubi: mtd0 is already attached to ubi0
[  893.233323] ubi: mtd0 is already attached to ubi0
[  893.246435] ubi: mtd0 is already attached to ubi0
22:04:44 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:44 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:44 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:44 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:44 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  893.594024] ubi: mtd0 is already attached to ubi0
22:04:45 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  893.619689] ubi: mtd0 is already attached to ubi0
22:04:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  893.794782] ubi: mtd0 is already attached to ubi0
22:04:45 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  893.857749] ubi: mtd0 is already attached to ubi0
22:04:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:45 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  893.949307] ubi: mtd0 is already attached to ubi0
[  894.041184] ubi: mtd0 is already attached to ubi0
22:04:45 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  894.161437] ubi: mtd0 is already attached to ubi0
22:04:45 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  894.220357] ubi: mtd0 is already attached to ubi0
[  894.326147] ubi: mtd0 is already attached to ubi0
22:04:46 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:46 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:46 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)

[  894.658103] ubi: mtd0 is already attached to ubi0
[  894.755302] ubi: mtd0 is already attached to ubi0
[  894.781729] ubi: mtd0 is already attached to ubi0
22:04:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)

[  894.805463] ubi: mtd0 is already attached to ubi0
22:04:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  894.955575] ubi: mtd0 is already attached to ubi0
22:04:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
socket$inet6(0xa, 0x2, 0x0)

[  894.988391] ubi: mtd0 is already attached to ubi0
[  895.152767] ubi: mtd0 is already attached to ubi0
22:04:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)

[  895.174377] ubi: mtd0 is already attached to ubi0
[  895.331151] ubi: mtd0 is already attached to ubi0
22:04:46 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:46 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)

22:04:46 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  895.504793] ubi: mtd0 is already attached to ubi0
22:04:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)

[  895.532217] ubi: mtd0 is already attached to ubi0
[  895.631917] ubi: mtd0 is already attached to ubi0
22:04:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)

[  895.662760] ubi: mtd0 is already attached to ubi0
[  895.758788] ubi: mtd0 is already attached to ubi0
22:04:47 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)

22:04:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)

[  896.035315] ubi: mtd0 is already attached to ubi0
22:04:47 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)

22:04:47 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000f4e50000000000000000"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  896.493815] ubi: mtd0 is already attached to ubi0
22:04:48 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)

[  896.566551] ubi: mtd0 is already attached to ubi0
[  896.666199] ubi: mtd0 is already attached to ubi0
22:04:48 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:48 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)

22:04:48 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:48 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:48 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  897.276171] ubi: mtd0 is already attached to ubi0
22:04:48 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)

[  897.418675] ubi: mtd0 is already attached to ubi0
22:04:48 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)

[  897.455557] ubi: mtd0 is already attached to ubi0
22:04:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  897.616051] ubi: mtd0 is already attached to ubi0
22:04:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)

22:04:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  897.639335] ubi: mtd0 is already attached to ubi0
[  897.787761] ubi: mtd0 is already attached to ubi0
22:04:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x7600e1)

[  897.812402] ubi: mtd0 is already attached to ubi0
[  897.946120] ubi: mtd0 is already attached to ubi0
22:04:49 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:49 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x7600e1)

22:04:49 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
getpid()
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  898.246414] ubi: mtd0 is already attached to ubi0
[  898.257627] ubi: mtd0 is already attached to ubi0
22:04:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  898.396909] ubi: mtd0 is already attached to ubi0
22:04:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  898.555996] ubi: mtd0 is already attached to ubi0
22:04:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  898.664318] ubi: mtd0 is already attached to ubi0
22:04:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:50 executing program 4:
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  898.767014] ubi: mtd0 is already attached to ubi0
22:04:50 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
syz_open_pts(r1, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:50 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:50 executing program 4:
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

22:04:50 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:50 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:50 executing program 4:
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

22:04:50 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  899.165839] ubi: mtd0 is already attached to ubi0
22:04:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  899.311466] ubi: mtd0 is already attached to ubi0
22:04:50 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

22:04:50 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  899.423815] ubi: mtd0 is already attached to ubi0
22:04:50 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  899.478631] ubi: mtd0 is already attached to ubi0
[  899.564401] ubi: mtd0 is already attached to ubi0
22:04:51 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  899.666183] ubi: mtd0 is already attached to ubi0
[  899.755768] ubi: mtd0 is already attached to ubi0
22:04:51 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
syz_open_pts(r1, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:51 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x10, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:51 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:51 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

22:04:51 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  899.945079] ubi: mtd0 is already attached to ubi0
22:04:51 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

22:04:51 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  900.136818] ubi: mtd0 is already attached to ubi0
22:04:51 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

22:04:51 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:51 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)

[  900.436117] ubi: mtd0 is already attached to ubi0
22:04:52 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
syz_open_pts(r1, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:52 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)

22:04:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:52 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:52 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:52 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)

22:04:52 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
syz_open_pts(r1, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:52 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:52 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:52 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, 0x0)

22:04:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:53 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  901.808748] ubi: mtd0 is already attached to ubi0
22:04:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  901.951051] ubi: mtd0 is already attached to ubi0
22:04:53 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  902.059706] ubi: mtd0 is already attached to ubi0
22:04:53 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000f4e50000000000000000"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  902.205740] ubi: mtd0 is already attached to ubi0
22:04:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:54 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:54 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:54 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:54 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, 0x0)

22:04:54 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  902.847315] ubi: mtd0 is already attached to ubi0
22:04:54 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  903.266709] ubi: mtd0 is already attached to ubi0
22:04:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  903.419969] ubi: mtd0 is already attached to ubi0
22:04:54 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:54 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  903.549097] ubi: mtd0 is already attached to ubi0
[  903.601444] ubi: mtd0 is already attached to ubi0
22:04:55 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:55 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:55 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x2)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

22:04:55 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, 0x0)

[  904.056365] ubi: mtd0 is already attached to ubi0
22:04:55 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  904.270167] ubi: mtd0 is already attached to ubi0
22:04:55 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:55 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:55 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

22:04:55 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34e7fff4ffff340000007f12b579fb64a1c52795c36ff564666c5a4d24caa02b8c750ecbd956df78a949b7d0e2cd5c389c1f42d3a9bdd962f67087f744de2c074877826f7c8e6f8e6e05b645ca18b675da4806d40ce1fb6cc6fe17fa4497f2682d1ae8ba9159cc108e2f33b381a9b6600d019f0bc48589227096f0f1e5c046812081b646b82ec728705be851423250b8b837a8c0b5c77297cd574718400d2d11af25098583fa490d5e0400a5fc938666fc39cd753641bf5dd7eca702026774e5b3431f35437ddc6bd1e87152de010000000088d25d5bc60c5c07945e591ac86758f6856d94177cb686946c209934ad2b157a100df8cf8cc74753c735eb6f295353783141df1eb49aabf1aaec3b655150038ff8d9c68dc291a7a48642d7b1c611fed7d360e279bd45ed25bbeaefc6befd00000000004a61f21d6c64263240000000f4e50000000000000000"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x2)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

22:04:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  904.451142] ubi: mtd0 is already attached to ubi0
22:04:55 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x0, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  904.570315] ubi: mtd0 is already attached to ubi0
22:04:56 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x0, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:56 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x0, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:56 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x2)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

22:04:56 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:56 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x0, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  905.013570] ubi: mtd0 is already attached to ubi0
22:04:56 executing program 4:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  905.077138] ubi: mtd0 is already attached to ubi0
22:04:56 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:56 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  905.162146] ubi: mtd0 is already attached to ubi0
[  905.264616] ubi: mtd0 is already attached to ubi0
[  905.316361] ubi: mtd0 is already attached to ubi0
22:04:57 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

22:04:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:57 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:57 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x2)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

22:04:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  905.644504] ubi: mtd0 is already attached to ubi0
22:04:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  905.665410] ubi: mtd0 is already attached to ubi0
22:04:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  905.696676] ubi: mtd0 is already attached to ubi0
22:04:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  905.885682] ubi: mtd0 is already attached to ubi0
[  905.905148] ubi: mtd0 is already attached to ubi0
22:04:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  905.936451] ubi: mtd0 is already attached to ubi0
[  906.084570] ubi: mtd0 is already attached to ubi0
[  906.103483] ubi: mtd0 is already attached to ubi0
[  906.109186] ubi: mtd0 is already attached to ubi0
22:04:57 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x0, 0x5f})

22:04:57 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:57 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x2)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

22:04:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff})
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x7600e1)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:57 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  906.475263] ubi: mtd0 is already attached to ubi0
[  906.513363] ubi: mtd0 is already attached to ubi0
22:04:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  906.551259] ubi: mtd0 is already attached to ubi0
[  906.665988] ubi: mtd0 is already attached to ubi0
22:04:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x7600e1)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x0, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  906.767921] ubi: mtd0 is already attached to ubi0
22:04:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x7600e1)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r2, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x0, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  906.955961] ubi: mtd0 is already attached to ubi0
[  907.022999] ubi: mtd0 is already attached to ubi0
[  907.139526] ubi: mtd0 is already attached to ubi0
22:04:58 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17})

22:04:58 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x0, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:58 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000))
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x2)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

22:04:58 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  907.368402] ubi: mtd0 is already attached to ubi0
22:04:58 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r3)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  907.431336] ubi: mtd0 is already attached to ubi0
22:04:58 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0x0, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  907.455962] ubi: mtd0 is already attached to ubi0
[  907.605344] ubi: mtd0 is already attached to ubi0
22:04:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0x0, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  907.683925] ubi: mtd0 is already attached to ubi0
22:04:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0x0, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  907.826357] ubi: mtd0 is already attached to ubi0
22:04:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  907.965935] ubi: mtd0 is already attached to ubi0
[  908.087269] ubi: mtd0 is already attached to ubi0
22:04:59 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17})

22:04:59 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:59 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:04:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:59 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:04:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  908.424463] ubi: mtd0 is already attached to ubi0
22:04:59 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  908.454751] ubi: mtd0 is already attached to ubi0
22:04:59 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:04:59 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17})

[  908.480869] ubi: mtd0 is already attached to ubi0
[  908.605743] ubi: mtd0 is already attached to ubi0
22:05:00 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x0, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  908.638634] ubi: mtd0 is already attached to ubi0
22:05:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x0, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:00 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x0, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  908.766048] ubi: mtd0 is already attached to ubi0
[  908.834650] ubi: mtd0 is already attached to ubi0
[  908.899980] ubi: mtd0 is already attached to ubi0
22:05:00 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:00 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x0, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x0, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:00 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:05:00 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:00 executing program 5:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17})

[  909.192151] ubi: mtd0 is already attached to ubi0
[  909.214286] ubi: mtd0 is already attached to ubi0
22:05:00 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x0, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  909.495893] ubi: mtd0 is already attached to ubi0
22:05:00 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:05:00 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  909.525923] ubi: mtd0 is already attached to ubi0
22:05:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  909.625494] ubi: mtd0 is already attached to ubi0
[  909.693186] ubi: mtd0 is already attached to ubi0
[  909.775820] ubi: mtd0 is already attached to ubi0
22:05:01 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:01 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:01 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:01 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  910.069432] ubi: mtd0 is already attached to ubi0
[  910.082837] ubi: mtd0 is already attached to ubi0
22:05:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x0, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x0, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:01 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:01 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x0, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  910.287270] ubi: mtd0 is already attached to ubi0
[  910.306721] ubi: mtd0 is already attached to ubi0
22:05:01 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  910.387799] ubi: mtd0 is already attached to ubi0
22:05:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x0, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  910.467484] ubi: mtd0 is already attached to ubi0
[  910.525887] ubi: mtd0 is already attached to ubi0
[  910.641482] ubi: mtd0 is already attached to ubi0
[  910.702424] ubi: mtd0 is already attached to ubi0
22:05:02 executing program 4 (fault-call:3 fault-nth:0):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

22:05:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:02 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:05:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x0, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:02 executing program 5 (fault-call:8 fault-nth:0):
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17})

22:05:02 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x0, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  910.963129] ubi: mtd0 is already attached to ubi0
[  910.979918] ubi: mtd0 is already attached to ubi0
[  911.014719] ubi: mtd0 is already attached to ubi0
[  911.019891] FAULT_INJECTION: forcing a failure.
[  911.019891] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  911.032197] CPU: 0 PID: 32220 Comm: syz-executor.4 Not tainted 4.14.164-syzkaller #0
[  911.040097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  911.049804] Call Trace:
[  911.052410]  dump_stack+0x142/0x197
[  911.056055]  should_fail.cold+0x10f/0x159
[  911.060215]  ? save_trace+0x290/0x290
[  911.064034]  __alloc_pages_nodemask+0x1d6/0x7a0
[  911.068728]  ? find_held_lock+0x35/0x130
[  911.072807]  ? __alloc_pages_slowpath+0x2930/0x2930
[  911.077850]  ? lock_downgrade+0x740/0x740
[  911.082027]  alloc_pages_current+0xec/0x1e0
[  911.086496]  __get_free_pages+0xf/0x40
[  911.090399]  __tlb_remove_page_size+0x2c5/0x4f0
[  911.095084]  unmap_page_range+0xb59/0x19f0
[  911.099348]  ? vm_normal_page_pmd+0x360/0x360
[  911.103857]  ? uprobe_munmap+0x94/0x210
[  911.107846]  unmap_single_vma+0x15d/0x2c0
[  911.112014]  unmap_vmas+0xac/0x170
[  911.115576]  exit_mmap+0x285/0x4e0
[  911.119156]  ? SyS_munmap+0x30/0x30
[  911.122808]  ? kmem_cache_free+0x244/0x2b0
[  911.127069]  ? __khugepaged_exit+0xcf/0x3d0
[  911.131398]  ? mm_update_next_owner+0x450/0x5d0
[  911.136193]  mmput+0x114/0x440
[  911.139403]  do_exit+0x952/0x2cd0
[  911.142881]  ? SOFTIRQ_verbose+0x10/0x10
[  911.146948]  ? save_trace+0x290/0x290
[  911.150750]  ? get_signal+0x319/0x1cd0
[  911.154642]  ? mm_update_next_owner+0x5d0/0x5d0
[  911.159359]  do_group_exit+0x111/0x330
[  911.163274]  get_signal+0x381/0x1cd0
[  911.166999]  ? __mutex_unlock_slowpath+0x71/0x800
[  911.172027]  ? wait_for_completion+0x420/0x420
[  911.176623]  do_signal+0x86/0x19a0
[  911.180169]  ? ctrl_cdev_ioctl+0x99/0x230
[  911.184347]  ? vol_cdev_llseek+0x150/0x150
[  911.188593]  ? setup_sigcontext+0x7d0/0x7d0
[  911.192917]  ? vol_cdev_llseek+0x150/0x150
[  911.197249]  ? do_vfs_ioctl+0xef/0x1060
[  911.201322]  ? selinux_file_mprotect+0x5d0/0x5d0
[  911.206085]  ? lock_downgrade+0x740/0x740
[  911.210268]  ? ioctl_preallocate+0x1c0/0x1c0
[  911.214691]  ? __fget+0x237/0x370
[  911.216124] FAULT_INJECTION: forcing a failure.
[  911.216124] name failslab, interval 1, probability 0, space 0, times 0
[  911.218169]  ? exit_to_usermode_loop+0x3d/0x220
[  911.218177]  exit_to_usermode_loop+0x15c/0x220
[  911.218184]  do_syscall_64+0x4bc/0x640
[  911.218189]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  911.218197]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  911.218202] RIP: 0033:0x45af49
[  911.218205] RSP: 002b:00007f725ada4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  911.218212] RAX: ffffffffffffffef RBX: 00007f725ada4c90 RCX: 000000000045af49
[  911.218215] RDX: 00000000007600e1 RSI: 0000000040186f40 RDI: 0000000000000003
[  911.218219] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  911.218222] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f725ada56d4
[  911.218225] R13: 00000000004c288a R14: 00000000004d8cd0 R15: 0000000000000004
[  911.277564] ubi: mtd0 is already attached to ubi0
[  911.278747] CPU: 1 PID: 32214 Comm: syz-executor.5 Not tainted 4.14.164-syzkaller #0
[  911.278753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  911.278757] Call Trace:
[  911.278772]  dump_stack+0x142/0x197
[  911.278785]  should_fail.cold+0x10f/0x159
[  911.333941]  should_failslab+0xdb/0x130
[  911.337926]  __kmalloc+0x71/0x7a0
[  911.341406]  ? SOFTIRQ_verbose+0x10/0x10
[  911.345477]  ? pty_write+0x14d/0x1d0
[  911.349198]  ? __tty_buffer_request_room+0x1a4/0x500
[  911.354314]  __tty_buffer_request_room+0x1a4/0x500
[  911.359279]  tty_insert_flip_string_fixed_flag+0x8a/0x1c0
[  911.364839]  pty_write+0x113/0x1d0
[  911.368392]  ? tty_put_char+0xb4/0x130
[  911.372291]  tty_put_char+0x108/0x130
[  911.376106]  ? dev_match_devt+0x90/0x90
[  911.380091]  ? do_output_char+0x13a/0x7a0
[  911.384258]  __process_echoes+0x4a1/0x8a0
[  911.388433]  n_tty_receive_buf_common+0x8ed/0x2570
[  911.393391]  ? n_tty_receive_buf2+0x40/0x40
[  911.397726]  n_tty_receive_buf+0x31/0x3b
[  911.401813]  tty_ioctl+0xded/0x1320
[  911.405471]  ? tty_vhangup+0x30/0x30
[  911.409283]  ? perf_trace_lock+0x60/0x500
[  911.413446]  ? __might_sleep+0x93/0xb0
[  911.417339]  ? __fget+0x210/0x370
[  911.420810]  ? tty_vhangup+0x30/0x30
[  911.424533]  do_vfs_ioctl+0x7ae/0x1060
[  911.428434]  ? selinux_file_mprotect+0x5d0/0x5d0
[  911.433201]  ? lock_downgrade+0x740/0x740
[  911.437360]  ? ioctl_preallocate+0x1c0/0x1c0
[  911.441781]  ? __fget+0x237/0x370
[  911.445255]  ? security_file_ioctl+0x89/0xb0
[  911.449677]  SyS_ioctl+0x8f/0xc0
[  911.453054]  ? do_vfs_ioctl+0x1060/0x1060
[  911.457215]  do_syscall_64+0x1e8/0x640
[  911.461114]  ? trace_hardirqs_off_thunk+0x1a/0x1c
22:05:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x0, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x0, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:02 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x0, 0x0}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:05:02 executing program 2:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:02 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  911.466001]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  911.471198] RIP: 0033:0x45af49
[  911.474480] RSP: 002b:00007f4202112c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  911.475947] ubi: mtd0 is already attached to ubi0
[  911.482192] RAX: ffffffffffffffda RBX: 00007f4202112c90 RCX: 000000000045af49
[  911.482198] RDX: 0000000020000100 RSI: 0000000000005412 RDI: 0000000000000005
[  911.482203] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  911.482208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f42021136d4
[  911.482213] R13: 00000000004c62a7 R14: 00000000004dd8f0 R15: 0000000000000006
[  911.482236] 
[  911.482240] ======================================================
[  911.482243] WARNING: possible circular locking dependency detected
[  911.482245] 4.14.164-syzkaller #0 Not tainted
[  911.482248] ------------------------------------------------------
[  911.482250] syz-executor.5/32214 is trying to acquire lock:
[  911.482252]  (console_owner){-.-.}, at: [<ffffffff814b3581>] vprintk_emit+0x2f1/0x600
[  911.482258] 
[  911.482260] but task is already holding lock:
[  911.482261]  (&(&port->lock)->rlock){-.-.}, at: [<ffffffff834e2160>] pty_write+0xe0/0x1d0
[  911.482267] 
[  911.482270] which lock already depends on the new lock.
[  911.482271] 
[  911.482272] 
[  911.482275] the existing dependency chain (in reverse order) is:
[  911.482276] 
[  911.482277] -> #2 (&(&port->lock)->rlock){-.-.}:
[  911.482289]        lock_acquire+0x16f/0x430
[  911.482291]        _raw_spin_lock_irqsave+0x95/0xcd
[  911.482293]        tty_port_tty_get+0x22/0x90
[  911.482295]        tty_port_default_wakeup+0x16/0x40
[  911.482297]        tty_port_tty_wakeup+0x57/0x70
[  911.482299]        uart_write_wakeup+0x46/0x70
[  911.482301]        serial8250_tx_chars+0x40d/0xa10
[  911.482303]        serial8250_handle_irq.part.0+0x206/0x250
[  911.482305]        serial8250_default_handle_irq+0xa1/0x120
[  911.482307]        serial8250_interrupt+0xe9/0x1a0
[  911.482309]        __handle_irq_event_percpu+0x125/0x7f0
[  911.482312]        handle_irq_event_percpu+0x65/0x130
22:05:03 executing program 5 (fault-call:8 fault-nth:1):
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0xfffffffffffffffe, 0x7, 0x0, 0x100000009b4b62b})
r2 = syz_open_pts(r1, 0x0)
ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17})

[  911.482314]        handle_irq_event+0xa7/0x134
[  911.482316]        handle_edge_irq+0x22b/0x840
[  911.482318]        handle_irq+0x39/0x50
[  911.482320]        do_IRQ+0x99/0x1d0
[  911.482322]        ret_from_intr+0x0/0x1e
[  911.482324]        native_safe_halt+0xe/0x10
[  911.482326]        arch_cpu_idle+0xa/0x10
[  911.482328]        default_idle_call+0x36/0x90
[  911.482330]        do_idle+0x262/0x3d0
[  911.482332]        cpu_startup_entry+0x1b/0x20
[  911.482334]        rest_init+0x1d9/0x1e2
[  911.482336]        start_kernel+0x6df/0x6fd
[  911.482338]        x86_64_start_reservations+0x29/0x2b
[  911.482340]        x86_64_start_kernel+0x77/0x7b
[  911.482343]        secondary_startup_64+0xa5/0xb0
[  911.482344] 
[  911.482345] -> #1 (&port_lock_key){-.-.}:
[  911.482353]        lock_acquire+0x16f/0x430
[  911.482355]        _raw_spin_lock_irqsave+0x95/0xcd
[  911.482358]        serial8250_console_write+0x709/0x930
[  911.482360]        univ8250_console_write+0x5f/0x70
[  911.482362]        console_unlock+0x9ba/0xed0
[  911.482364]        vprintk_emit+0x1f9/0x600
[  911.482366]        vprintk_default+0x28/0x30
[  911.482368]        vprintk_func+0x5d/0x159
[  911.482370]        printk+0x9e/0xbc
[  911.482372]        register_console+0x614/0x9e0
[  911.482374]        univ8250_console_init+0x33/0x3f
[  911.482376]        console_init+0x4d/0x5d
[  911.482378]        start_kernel+0x43c/0x6fd
[  911.482381]        x86_64_start_reservations+0x29/0x2b
[  911.482383]        x86_64_start_kernel+0x77/0x7b
[  911.482386]        secondary_startup_64+0xa5/0xb0
[  911.482387] 
[  911.482389] -> #0 (console_owner){-.-.}:
[  911.482396]        __lock_acquire+0x2cb3/0x4620
[  911.482398]        lock_acquire+0x16f/0x430
[  911.482400]        vprintk_emit+0x32e/0x600
[  911.482402]        vprintk_default+0x28/0x30
[  911.482404]        vprintk_func+0x5d/0x159
[  911.482406]        printk+0x9e/0xbc
[  911.482408]        should_fail.cold+0xe4/0x159
[  911.482410]        should_failslab+0xdb/0x130
[  911.482412]        __kmalloc+0x71/0x7a0
[  911.482414]        __tty_buffer_request_room+0x1a4/0x500
[  911.482417]        tty_insert_flip_string_fixed_flag+0x8a/0x1c0
[  911.482419]        pty_write+0x113/0x1d0
[  911.482421]        tty_put_char+0x108/0x130
[  911.482423]        __process_echoes+0x4a1/0x8a0
[  911.482425]        n_tty_receive_buf_common+0x8ed/0x2570
[  911.482427]        n_tty_receive_buf+0x31/0x3b
[  911.482429]        tty_ioctl+0xded/0x1320
[  911.482431]        do_vfs_ioctl+0x7ae/0x1060
[  911.482433]        SyS_ioctl+0x8f/0xc0
[  911.482435]        do_syscall_64+0x1e8/0x640
[  911.482437]        entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  911.482438] 
[  911.482441] other info that might help us debug this:
[  911.482442] 
[  911.482444] Chain exists of:
[  911.482445]   console_owner --> &port_lock_key --> &(&port->lock)->rlock
[  911.482455] 
[  911.482457]  Possible unsafe locking scenario:
[  911.482458] 
[  911.482460]        CPU0                    CPU1
[  911.482462]        ----                    ----
[  911.482463]   lock(&(&port->lock)->rlock);
[  911.482468]                                lock(&port_lock_key);
[  911.482474]                                lock(&(&port->lock)->rlock);
[  911.482478]   lock(console_owner);
[  911.482482] 
[  911.482483]  *** DEADLOCK ***
[  911.482485] 
[  911.482487] 4 locks held by syz-executor.5/32214:
[  911.482488]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff866a51b3>] ldsem_down_read+0x33/0x40
[  911.482496]  #1:  (&o_tty->termios_rwsem/1){++++}, at: [<ffffffff834d10cf>] n_tty_receive_buf_common+0x8f/0x2570
[  911.482505]  #2:  (&ldata->output_lock){+.+.}, at: [<ffffffff834d18ed>] n_tty_receive_buf_common+0x8ad/0x2570
[  911.482514]  #3:  (&(&port->lock)->rlock){-.-.}, at: [<ffffffff834e2160>] pty_write+0xe0/0x1d0
[  911.482522] 
[  911.482523] stack backtrace:
[  911.482527] CPU: 1 PID: 32214 Comm: syz-executor.5 Not tainted 4.14.164-syzkaller #0
[  911.482531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  911.482532] Call Trace:
[  911.482534]  dump_stack+0x142/0x197
[  911.482536]  ? vprintk_func+0x65/0x159
[  911.482539]  print_circular_bug.isra.0.cold+0x1cc/0x28f
[  911.482541]  __lock_acquire+0x2cb3/0x4620
[  911.482543]  ? trace_hardirqs_on+0x10/0x10
[  911.482545]  ? save_trace+0x290/0x290
[  911.482547]  ? SOFTIRQ_verbose+0x10/0x10
[  911.482549]  ? vprintk_emit+0x309/0x600
[  911.482551]  lock_acquire+0x16f/0x430
[  911.482553]  ? vprintk_emit+0x2f1/0x600
[  911.482555]  vprintk_emit+0x32e/0x600
[  911.482557]  ? vprintk_emit+0x2f1/0x600
[  911.482560]  vprintk_default+0x28/0x30
[  911.482561]  vprintk_func+0x5d/0x159
[  911.482563]  printk+0x9e/0xbc
[  911.482565]  ? show_regs_print_info+0x63/0x63
[  911.482568]  ? check_preemption_disabled+0x3c/0x250
[  911.482570]  ? ___ratelimit+0x55/0x537
[  911.482572]  should_fail.cold+0xe4/0x159
[  911.482574]  should_failslab+0xdb/0x130
[  911.482576]  __kmalloc+0x71/0x7a0
[  911.482578]  ? SOFTIRQ_verbose+0x10/0x10
[  911.482580]  ? pty_write+0x14d/0x1d0
[  911.482583]  ? __tty_buffer_request_room+0x1a4/0x500
[  911.482585]  __tty_buffer_request_room+0x1a4/0x500
[  911.482588]  tty_insert_flip_string_fixed_flag+0x8a/0x1c0
[  911.482590]  pty_write+0x113/0x1d0
[  911.482592]  ? tty_put_char+0xb4/0x130
[  911.482594]  tty_put_char+0x108/0x130
[  911.482596]  ? dev_match_devt+0x90/0x90
[  911.482598]  ? do_output_char+0x13a/0x7a0
[  911.482600]  __process_echoes+0x4a1/0x8a0
[  911.482602]  n_tty_receive_buf_common+0x8ed/0x2570
[  911.482604]  ? n_tty_receive_buf2+0x40/0x40
[  911.482607]  n_tty_receive_buf+0x31/0x3b
[  911.482608]  tty_ioctl+0xded/0x1320
[  911.482610]  ? tty_vhangup+0x30/0x30
[  911.482613]  ? perf_trace_lock+0x60/0x500
[  911.482615]  ? __might_sleep+0x93/0xb0
[  911.482616]  ? __fget+0x210/0x370
[  911.482619]  ? tty_vhangup+0x30/0x30
[  911.482621]  do_vfs_ioctl+0x7ae/0x1060
[  911.482623]  ? selinux_file_mprotect+0x5d0/0x5d0
[  911.482625]  ? lock_downgrade+0x740/0x740
[  911.482627]  ? ioctl_preallocate+0x1c0/0x1c0
[  911.482629]  ? __fget+0x237/0x370
[  911.482632]  ? security_file_ioctl+0x89/0xb0
[  911.482633]  SyS_ioctl+0x8f/0xc0
[  911.482636]  ? do_vfs_ioctl+0x1060/0x1060
[  911.482638]  do_syscall_64+0x1e8/0x640
[  911.482640]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  911.482643]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  911.482645] RIP: 0033:0x45af49
[  911.482647] RSP: 002b:00007f4202112c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  911.482652] RAX: ffffffffffffffda RBX: 00007f4202112c90 RCX: 000000000045af49
[  911.482655] RDX: 0000000020000100 RSI: 0000000000005412 RDI: 0000000000000005
[  911.482658] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  911.482661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f42021136d4
22:05:03 executing program 2:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:03 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0), 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:05:03 executing program 2:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:03 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x0, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:03 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x21000, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

22:05:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0x0, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  911.482664] R13: 00000000004c62a7 R14: 00000000004dd8f0 R15: 0000000000000006
[  912.332417] ubi: mtd0 is already attached to ubi0
[  912.341113] ubi: mtd0 is already attached to ubi0
22:05:03 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

[  912.438144] ubi: mtd0 is already attached to ubi0
[  912.483796] ubi: mtd0 is already attached to ubi0
22:05:03 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x0, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:03 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0x0, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  912.506578] ubi: mtd0 is already attached to ubi0
22:05:04 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
clone(0x20800, &(0x7f0000000000)="a861c1de84b4263eead0b8778c5f7309120f7de9517f72db6dde8f4c542b9224e5f77ddce37407c0859373de7b31d56003ea20b2bb6da802fdfd7707b9", &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)="aaee8bdd75a8a0be8e8d78a892ace026336b8bb0d39e1e1a8d1672945537855ad2f622887953c80f77f2603ba2b55c725f41b7f563915d4ededa4403ddb3d89740ba7416617af6e98db7bf6a35bb0d4f975d9d49aecdcd2af865d152d7017c72ab72878419ee9e91f641d668b957ba9ab06194e204f5de7abde5566ab9c47c0697c6")
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  912.611501] ubi: mtd0 is already attached to ubi0
[  912.643973] ubi: mtd0 is already attached to ubi0
[  912.664897] ubi: mtd0 is already attached to ubi0
22:05:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0x0, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0x0, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:04 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0), 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:05:04 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x2)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KDSKBLED(r3, 0x4b65, 0x5)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
accept(r4, &(0x7f0000000180)=@in={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x80)
ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x7600e1)
select(0x40, &(0x7f0000000000)={0x2, 0x6, 0x0, 0x5, 0x8, 0x7, 0x6, 0x5}, &(0x7f0000000040)={0x10000, 0x8, 0x100000001, 0x100, 0x6, 0xffffffffffffff80, 0x80, 0x427}, &(0x7f00000000c0)={0x7fff, 0x64, 0xffffffffffffff73, 0x6, 0x1, 0x1, 0x3, 0x40}, &(0x7f0000000100)={0x77359400})
connect$l2tp6(r1, &(0x7f0000000140)={0xa, 0x0, 0x6, @mcast1, 0x9e3}, 0x20)

[  912.808259] ubi: mtd0 is already attached to ubi0
[  912.831509] ubi: mtd0 is already attached to ubi0
22:05:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0x0, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x0, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  912.953418] ubi: mtd0 is already attached to ubi0
22:05:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0x0, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  912.983868] ubi: mtd0 is already attached to ubi0
22:05:04 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x0, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  913.086351] ubi: mtd0 is already attached to ubi0
[  913.122451] ubi: mtd0 is already attached to ubi0
22:05:05 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:05 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x0, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:05 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0), 0x10)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:05:05 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x12062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x4000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)
r1 = socket$inet6(0xa, 0x3, 0x2)
r2 = dup(r1)
ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000040)=0x8001)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000000)={0x3, r2})
r3 = socket$inet6(0xa, 0x3, 0x2)
r4 = dup(r3)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, <r5=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a8a000)=0xfffffffffffffdf2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r5, @in6={{0xa, 0x4e03, 0x7, @ipv4={[], [], @local}, 0x985}}, 0x7fe, 0x101, 0x3, 0x0, 0x0, 0x80, 0x1}, 0x9c)

[  913.742335] ubi: mtd0 is already attached to ubi0
22:05:05 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x0, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:05 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)
r1 = socket$inet6(0xa, 0x3, 0x2)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x3, 0x2)
dup(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth1_to_hsr\x00', r6})
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, 0xfffffffffffffffe)
r8 = geteuid()
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x20, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="ed4c17f58ce3f3dfe594c162c489fdce4467d18e51adf93c2161b9e63146415d30fd29ae116b4ce9c4a3ce3417521b437965107331e0966519c65ed1aee925c8232e2ffe726b1239e5b4fcf28d54ca5f1570378baaac89fcd0c56b21b9f72ee9d668ffb3002b9f8f9ea3114b0e3bcd84b38a65b99de91fbd1464348bd8437d83a9e7a4ca2f0a6fa88f9576e77c1f2f18dbefe06bb375c4197d17ea820d", 0x9d, 0x9}], 0x1000000, &(0x7f00000002c0)={[{@nouser_xattr='nouser_xattr'}], [{@obj_role={'obj_role'}}, {@hash='hash'}, {@hash='hash'}, {@dont_appraise='dont_appraise'}, {@uid_gt={'uid>', r7}}, {@uid_gt={'uid>', r8}}, {@hash='hash'}]})

[  913.785097] ubi: mtd0 is already attached to ubi0
22:05:05 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0)
setuid(r1)
r2 = getgid()
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f00000000c0)={0xa0, 0x19, 0x2, {0x2200, {0x10, 0x4}, 0x10c, r1, r2, 0x5, 0x1, 0x1c, 0x10000, 0x2, 0xff, 0x9, 0xfffffffffffffffe, 0x1, 0x9, 0x1, 0xffffffffffffc28e, 0x8, 0x4, 0x7}}, 0xa0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x7600e1)

[  913.840315] ubi: mtd0 is already attached to ubi0
[  913.923514] ubi: mtd0 is already attached to ubi0
[  913.964284] ubi: mtd0 is already attached to ubi0
22:05:05 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x2)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000040)=0x2)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x185102)
perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r2, 0x0)
r3 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000140)={0x1, 'veth0_to_bridge\x00', {}, 0x2ae})
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x7600e1)

22:05:05 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:05 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80200, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

22:05:05 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x0, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  914.104071] ubi: mtd0 is already attached to ubi0
[  914.197781] ubi: mtd0 is already attached to ubi0
22:05:07 executing program 2:
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:07 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x2)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000000))
ioctl$NBD_CLEAR_QUE(r1, 0xab05)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x7600e1)

22:05:07 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x0, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:05:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x0, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:07 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x2)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000000)={0xc, {0x99, 0x3, 0x3, 0x4}})
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)

[  915.877923] ubi: mtd0 is already attached to ubi0
[  915.888152] ubi: mtd0 is already attached to ubi0
[  915.917008] ubi: mtd0 is already attached to ubi0
22:05:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x0, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x0, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:07 executing program 4:
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)
r1 = socket$inet6(0xa, 0x3, 0x2)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0xffffffff, 0x4, [0x81]})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000000c0)={0x43fc, 0x3, 0x0, 'queue1\x00', 0x1ff})

[  915.947486] ubi: mtd0 is already attached to ubi0
[  916.020265] ubi: mtd0 is already attached to ubi0
22:05:07 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x800000, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  916.067659] ubi: mtd0 is already attached to ubi0
22:05:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0x0, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  916.090748] ubi: mtd0 is already attached to ubi0
22:05:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x0, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  916.150257] ubi: mtd0 is already attached to ubi0
[  916.201742] ubi: mtd0 is already attached to ubi0
[  916.246164] ubi: mtd0 is already attached to ubi0
22:05:07 executing program 2:
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:07 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)
ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000040)={[{0x8, 0x9, 0x5, 0xff, 0x2, 0x0, 0x1, 0x0, 0x3f, 0x1, 0x7, 0x6, 0x10}, {0x200, 0x1, 0x52, 0x71, 0x6, 0x8, 0xc2, 0xfc, 0x0, 0x1f, 0x89, 0x0, 0x40}, {0x4, 0xffff, 0x20, 0x5, 0xc0, 0x7b, 0x8, 0x7, 0xe0, 0x4, 0x3, 0x0, 0x40}], 0x2})

22:05:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x0, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:07 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x0, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:05:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0x0, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  916.478342] ubi: mtd0 is already attached to ubi0
22:05:07 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x2)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)={0x3, 'ip_vti0\x00', {0x80000001}, 0x20})
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x444000, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@null, @null, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]})
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x18900, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x7600e1)

[  916.502060] ubi: mtd0 is already attached to ubi0
22:05:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0x0, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  916.541004] ubi: mtd0 is already attached to ubi0
22:05:08 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)
ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f00000000c0))
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_targets\x00')
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000300)=""/220, &(0x7f0000000580), &(0x7f00000005c0)=""/231, 0xf000})
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/339])
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0xaf, @mcast1, 0x7f}}, 0x0, 0x0, 0x27, 0x0, "8dffc1452ef57797574affa5b6783aa5040ed340af5c9191117668995513cf35421a52c5fd1f76cddc3b4b12326893e01c78fd1eb1c408aeb6d40d5b602b49813ebcc558607f7ab17454023c76dcd823"}, 0xd8)
r3 = socket$inet6(0xa, 0x3, 0x2)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000580))
lseek(r1, 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

22:05:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  916.652240] ubi: mtd0 is already attached to ubi0
22:05:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:08 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x70, 0x2, 0x1, 0x0, 0x4, 0x0, 0x7141, 0x40000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x5, @perf_bp={&(0x7f0000000000), 0x8}, 0xa000, 0xffffffff, 0x5, 0x4, 0x100000000, 0x0, 0x9}, r0, 0xb, r2, 0x2)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x7600e1)

[  916.721729] ubi: mtd0 is already attached to ubi0
[  916.779421] ubi: mtd0 is already attached to ubi0
[  916.833778] ubi: mtd0 is already attached to ubi0
[  916.854245] ubi: mtd0 is already attached to ubi0
[  916.874589] ubi: mtd0 is already attached to ubi0
22:05:08 executing program 2:
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:08 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1110c0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

22:05:08 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[  917.032986] ubi: mtd0 is already attached to ubi0
22:05:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x0, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:08 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000400)="b554b6511c06a5dfaaf491c4a68a8f8114128e094a64b54bcd", 0x19}, {&(0x7f0000000440)="b547cfd4935e20afa707e5b064e031dea80fdd62abb2730326c75b235365f93b1a28f2d862a55b0135227bc92fc416727bd319affbffcd6d9a743b1105430ea7c3df1fe2fdd3dc4d28394a48fd6e2e0fbf9ad5de86246b95a0947eefd83d9298e97871498ef1b8faca99ebf8a91440ad14d908cc95", 0x75}, {&(0x7f0000000500)}, {&(0x7f0000000540)="c0865ad563820be7b7ae48f121cfa391739d4e4927737d1d322bb3890c334b8c018d9a1ca5f2c47b7fed5a40c17f59ca9c6fe1f3", 0x34}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001900)="359425a50c71dbc6f53752780ee825719c3adf009dce3825fedb7fabe231afb722e1addc212cdbd3c63afec9d6b293d8909dc5eb1ecc24183bc87ce7313772fd17792ab23c79e8ca", 0x48}, {&(0x7f0000001600)="f7ae1017f34b076563889cb2de14ee75a3d4f990a0b3d5dcb07836549d4414fd979b17e21a22bb00acbd8ac1bb5b4b789b62aa2b213ea04c3a8d4deaa473ed90c0b4fce9b57c17fd07a9fdfef516236fcade01243940ee9fff790a500b1b706790069444acf211dcd095bfa3f5d83f4e833cae174b6858620aebe658497e3a461a02e2b1295e63c305886f5354cbdf7f4948bcb50a46b809861d8437e8949f6d0c89a6332ddac7a1d2c1318b513de7ef32db24eb009b01328517a97820", 0xbd}], 0x7, &(0x7f0000001840)=[@assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0xc0}], 0x30, 0xc840}, 0x8010)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)
r2 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r2})
r3 = socket$inet6(0xa, 0x3, 0x2)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={<r5=>0x0, 0x7, 0xe77ca1bc9ec44a35}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x3, 0x8602, 0x3f, 0x1, r5}, &(0x7f0000000300)=0x10)
r6 = socket$inet6(0xa, 0x3, 0x2)
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x9, 0x8, 0x0, 0x81, 0x0, 0x8, 0x2040, 0x63de8174ce6617b0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbb7, 0x1, @perf_config_ext={0x8}, 0x8016, 0x0, 0x5, 0x2, 0x80000000, 0x7ff, 0x1}, r2, 0x5, r7, 0x8)
r8 = request_key(&(0x7f0000000280)='keyring\x00', &(0x7f0000001580)={'syz', 0x1}, &(0x7f00000016c0)='^-\x00\fK7\x8dR`\xd4o\xfa5\xdd\xcc\xd7k\xe4\xd3?W\x1f\xbd\xd6\xf9\x88\x83\xad\xac_\xb6?\xa8\x84b\xbc\xb1c\xe1\xd7\xc7\x1ejN\xae\x14\xdaY\x91\x1e\xfe\x83\x96\xf0*\xf2\xa7\xd5Pc\xf8v\x91\x85\x8d\xb6\xff\xf9w\x0f\x9aJ\xef\xa4\xb4\x96o<\xdfX\xdb5\xa5\b\xd5\x7fd\x1a\xc8I\x12\xe8\x85X\xef[\xe9\xeca\x9ej\xbc\xd5s`\xd3\x1b\a\'\x815+\xbf\xd8;Q\xdd0\xf6\xa9Q\xcc\xbe\xe1Y\xfc\xbc\x90\r\x03\xf0\x06\xdd\x83\xef\x80F\x12c\xc1\xf9\x01\b\x86Np\xa1\xbd\xa2\x9f\xcd,\x10OR2\xfd%\x9fP\x05\xea\xd8\x1a\xc57\xc2\xc3\xc6\x89\x140`\x00', 0xffffffffffffffff)
syz_open_dev$video(&(0x7f0000000500)='/dev/video#\x00', 0x5, 0x100)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r8)
r9 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r8)
r10 = request_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000380)='^-\x00', 0xffffffffffffffff)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r10)
r11 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r10)
keyctl$KEYCTL_MOVE(0x1e, r9, 0xfffffffffffffffa, r11, 0x3)

[  917.071058] ubi: mtd0 is already attached to ubi0
22:05:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:08 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x157a}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0x80}, 0x1, 0x0, 0x0, 0x4010010}, 0x1)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x333080, 0x0)

[  917.134263] ubi: mtd0 is already attached to ubi0
22:05:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x0, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  917.169054] ubi: mtd0 is already attached to ubi0
[  917.211585] ubi: mtd0 is already attached to ubi0
22:05:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, 0x0, 0x0)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:08 executing program 4:
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x7600e1)

[  917.236382] ubi: mtd0 is already attached to ubi0
[  917.325485] ubi: mtd0 is already attached to ubi0
[  917.338441] ubi: mtd0 is already attached to ubi0
[  917.347238] ubi: mtd0 is already attached to ubi0
22:05:08 executing program 2:
getpid()
sched_setscheduler(0x0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280))
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x17, 0x5f})

22:05:08 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x3, 0x4000)
connect$llc(r1, &(0x7f0000000140)={0x1a, 0x201, 0x49, 0x0, 0x3, 0xa3, @remote}, 0x10)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

22:05:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x0, 0x5]}, 0x5c)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:08 executing program 3:
r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xe)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

22:05:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, 0x0, 0x0)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

22:05:08 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006001100c00400007002000070020000800100007002000030030000280400002804000028040000280400002804000006"], 0x1)
r1 = socket$inet6(0xa, 0xa, 0x3)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
perf_event_open(0x0, r3, 0xb, r2, 0x57aa83ff14fc01a9)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x7600e1)

[  917.505532] ubi: mtd0 is already attached to ubi0
[  917.537741] ubi: mtd0 is already attached to ubi0
22:05:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x0, 0x7f, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x56fc64f74309468b)
r0 = getpid()
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x2, 0x0, 0xd5, 0x1ff, r0})
r1 = syz_open_procfs(r0, &(0x7f0000000040)='smaps_rollup\x00')
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000001c0)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x4, 0x7fffffff}}, {0x7ff, 0x1, 0x0, 0x0, @adapter={0x54b, 0x7ff, 0x0, 0xfff, 0x7fff}}, {0x7fff, 0x1, 0x0, 0x0, @adapter={0x9032, 0x40400000000000, 0x100000000, 0x7fffffff, 0x80}}, {0x2, 0x1, 0x0, 0x0, @sint={0x81}}, {0xfffffff8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3}}, {0x80000000, 0x2, 0x0, 0x0, @irqchip={0xffff, 0x1}}, {0x1, 0x1, 0x0, 0x0, @msi={0x9, 0xeb9}}, {0x7dad2e40, 0x2, 0x0, 0x0, @msi={0x100, 0xfd, 0x1, 0x1ff}}, {0x1f, 0x2, 0x0, 0x0, @sint={0x5, 0xfffffffb}}]})
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x1fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x7600e1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000140)={{0xa, 0x4e20, 0x40, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, {0xa, 0x4e24, 0xa8c4bdbf, @local, 0x10001}, 0x2, [0xff, 0x7, 0x8, 0xe5, 0x0, 0x8, 0x4, 0x5]}, 0x5c)
connect$inet6(r3, 0x0, 0x0)
sendmmsg(r3, &(0x7f00000092c0), 0x800000000000164, 0x0)

[  917.578283] ubi: mtd0 is already attached to ubi0
22:05:09 executing program 4:
perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0)
clone(0x10062101, 0x0, 0x0, 0x0, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x7600e1)

[  917.727982] ubi: mtd0 is already attached to ubi0
22:05:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0