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", 0x1000}, {&(0x7f0000006880)="c77c9b2ebd43ade4a88c3c62d23eecd6dcb25b9e6de74805216f1758d560471a6fbf892c8b977a6bce6bb20cea0be429dab481d5548d7bdf67988085806c2bceda10", 0x42}, {&(0x7f0000006900)="07712193a971903a86cac35c08c564addea9e15989e7a3507da2727c9f35c49f6a25d6df6c6ad2fdc7bedd51d4d6631a2c81d3e191c30ddccdbf2eb7a7c943143731eb4c5828bc063970c640b4d9e511e4ecee800bc4bf9d6e3b0c6051c291f43882aa48512caf05aa44004f1e6e41145d8af4570871a92b962786acd631f269d2f4cd5ad16a6255b87dd9b5f6cab49e57c571541eeb29077978ddf9b812a2ec4d4923923b222c6f59368d8b59913f912d202b4a063f46c5c6e5211c8870dbd738535afab5b42fee2adbd2af897b81848327c8511a25ffc75941758d0a27ebdd70d46fb2839d188b42a74c3d87af46accd4031cdb4303d71", 0xf8}, {&(0x7f0000006a00)="63b2909543d5c8d9bdb7a4f17213b9fe255b55ac54eb84693ca25e5a52a30a86afa5e9df5aa15c", 0x27}, {&(0x7f0000006a40)="253bdba5cc851ef8c1fac305f3ef58c1d56db492fd68d3742a686ee688f8912ed527d4a6c450ecf259883d5e1961dea847ecf04ac881dcfd5a31abd1c7a6bdaf334b0c45f441f3993bf216c05a37a3488a59b90edfa5d06decc5032c1bf8bafa1cfff2fe03cdc8e371c121abdbbf36303a32b1b2681e4fc649525c68701aae78b09bf65e19f09c188ed41e95c0faf02a78cc7bf68e76297c0f149b6f0cc70ea9ffa5f6bed716197396fb2cba", 0xac}, {&(0x7f0000006b00)="ddc1685b78e293b16978251d098f636ac710d4", 0x13}], 0x9, &(0x7f0000006c00)=[{0x30, 0x116, 0x3ff, "4122da852f78bc27efffff457da239ece59ace01d7eca755dc5b457c51de68"}, {0x18, 0x10e, 0x3f, "cf2c"}], 0x48}}, {{0x0, 0x0, &(0x7f0000006dc0)=[{&(0x7f0000006c80)="7ae6390b4456c7a2a67d06a204fb9b23c03b45a8244d923d70c15a0acebf7899bcd71d55497ff5eac6ef9012b35694ff759e603ed7528fae80ad0a4f3882", 0x3e}, {&(0x7f0000006cc0)="258aa161071054b22130a45384", 0xd}, {&(0x7f0000006d00)="71e1295dda5d3b963aa30e1b882177eb307aa6d007f284fffc897d07f9cdb12cba75922785f8539628185fed406c2179a8d229ac5b374956f12672374e09316b79415eaa820da140084b1cda7e76bff6de9597be2471256363d07f522b3c1e4584ec4b65ffce2087d28d7e3f1720d952988a7c1e167ce37ae48155f1174da8b1d6dd58ba6381c87d4c2177ca8f9a5968108909fcb91c202b8f84e180b2ac80f01e605c832c15aea0770692986e30a21f0509f5420e9517ca", 0xb8}], 0x3, &(0x7f0000006e00)}}], 0x7, 0x8094) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000007000)={'raw\x00'}, &(0x7f0000007080)=0x54) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000070c0)={0xa, {0x1, 0x1, 0x5}}, 0xa) bind$inet6(0xffffffffffffffff, &(0x7f0000007100)={0xa, 0x4e21, 0xff, @remote, 0x5}, 0x1c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000007140)={{0x3, 0x0, @descriptor="1edfbfa4a40f3fed"}}) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000007180)='/dev/dlm-control\x00', 0x204000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r6) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000071c0)={r4}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000007200)) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000007240)='lo\x00') setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r7, 0x28, 0x6, &(0x7f0000007280)={0x0, 0xea60}, 0x10) [ 178.886023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 19:59:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x76006e) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="ba4300ec33283328cf2a163066b9690200000f3266b9bf0a00000f32670f6ce8666547bad104ed0f23c80f21f866350800a0000f23f88ed8", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) msync(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 178.943743] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.972748] print_req_error: I/O error, dev loop3, sector 0 [ 178.988037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.010255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.020814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.026615] XFS (loop3): unknown mount option [uid<00000000000000060929]. [ 179.031029] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 179.062603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.073660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.089438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.112367] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 179.121259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.130619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.153099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.163509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.179286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.192650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.203081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.216474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.228590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.239153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.248950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.260088] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 179.267031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.275339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.284381] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.292636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.301123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.309555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.317229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.271298] NOHZ: local_softirq_pending 08 19:59:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x6, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006926ed0c00"}, 0xd8) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000500)={0x2, 0x4e21, @multicast1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0xa1e7, 0x8}, @sack_perm, @mss={0x2, 0x400000}, @mss, @timestamp, @sack_perm], 0x6) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x7fffffdf}, 0x14) shutdown(r1, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000500)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) 19:59:49 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="36660f3882130f02b10000660f3881414466b80500000066b90e0000000f01d90f79777d369c66b8000000000f23c80f21f866350000a0000f23f80f38044800baf80c66b85bd8e08266efbafc0cb09bee6766c744240035cd0be66766c7442402000000006766c744240600000000670f011424", 0x74}], 0x1, 0x62, &(0x7f00000001c0)=[@cstype0={0x4, 0x2}], 0x1) 19:59:49 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, 0x0) 19:59:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0x400017e) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xe) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={0x6, 0xd3, 0x1, 0x676, 0xfffffffffffffffd}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) creat(&(0x7f0000000780)='./bus\x00', 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x123400, 0x0) setsockopt$inet_dccp_int(r5, 0x21, 0x4, &(0x7f0000000240)=0x6, 0x4) 19:59:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000000)={0x3}) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @hyper}, 0x10) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x2bf, 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000000)={0x3}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8}, 0x75, 0xfff, 0x400, 0x7fffffff, 0x0, 0x0, 0xb901}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0xfffffdef) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x800, 0xfff, 0x0, 0x0, 0xffffff00, {0x4e1, 0x5, 0x4, 0xf6a, 0x5, 0x0, 0x5, 0x40, 0xff81, 0x40, 0x0, 0x0, 0x0, 0x3f, "f946b0ba1e16a07b978e6c17bbb3aadc7c0e4984da8dabdbf37211e47093b20d"}}) 19:59:49 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x10000000003db5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e24}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5c, 0x2, [@TCA_RSVP_ACT={0x58, 0x6, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_setlink={0x30, 0x13, 0x2, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r6, 0x80, 0x40128}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0xae}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40812}, 0x40000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0x4, 0x4) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x51, 0x0, 0x0, 0x0, 0xfffffffffffffcb8}, 0x400020ff) [ 180.714188] QAT: Invalid ioctl 19:59:49 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="6436670f7911b9080900000f320f017f009a44e7f42a1d00c4e21daf8c2c06000000f2d8ba09000000660f388109b805000000b90f0000000f01c1c4c2adbfeb66b818000f00d0", 0x47}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffffb3, 0x0, 0x0, 0x19) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0xfffffffffffffdd5, 0x0, 0x0, 0x80, 0x8, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) connect$netlink(r4, &(0x7f0000000280)=@unspec, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9cc37a36", @ANYRES16=r5, @ANYBLOB="200025bd7000ffdbdf250a000000080037000000000008003700000000000c006e80040001000400020008003700000000004c005080050009000200000008000880040001001400088004000100040002000400010004000100040005000800030001ac0f0005000200050000000500090002000000050002000300000004002800"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4008025) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x76006e) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0x2}}, 0x101, 0x7f}, &(0x7f0000000240)=0x90) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x2c78, 0x3, 0x9}) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0xa000, 0x0) fcntl$dupfd(r2, 0x0, r7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:59:49 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 180.773456] ubi0: attaching mtd0 19:59:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0xec, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040090}, 0x8044) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0xffffffff7fffffff) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') prctl$PR_GET_TSC(0x19, &(0x7f0000000140)) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000005fd8f161fc190cb31548e2cf8445f1a0d213e77d37c53e070358c811f931fb62d704ae37310d087a065f2f3bd0a57c7133210917073a390c4e5bad0eaba14efee01518229c8a51d7863b32caf4f7e0fabbcbdb", @ANYRES16=r3, @ANYBLOB="040026bd7000fcdbdf25150000000c0009800800020003000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8090) r4 = socket(0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f00000003c0)='127.0.0.1\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYBLOB]) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRES32, @ANYRESHEX=r0, @ANYRESOCT=r4]) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0xc0, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_LABELS_MASK={0xc, 0x17, [0x400, 0xcde8]}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_NAT_SRC={0x50, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x804}, 0xc010) rmdir(&(0x7f00000000c0)='./bus/file0\x00') [ 180.800051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.815668] ubi0: scanning is finished [ 180.867976] ubi0: empty MTD device detected 19:59:49 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726fe341d0eab36b5364653d30303030013030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x800) [ 180.932018] overlayfs: filesystem on './file0' not supported as upperdir [ 180.953719] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 180.953752] FAT-fs (loop3): Filesystem has been set read-only [ 180.958189] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) 19:59:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', 0xffffffffffffffff, &(0x7f00000007c0)='./file0/f.le.\x00') sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b00010069703667726500003400028014000600fe8000000000000000000000000000bb14000700ff02000000000000000000000000000108000100", @ANYRES16, @ANYBLOB="4fa80f53156f6746254246102caa00"/25], 0x64}}, 0x0) [ 181.013182] overlayfs: unrecognized mount option "˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙0x000000000000000301777777777777777777777" or missing value [ 181.049189] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 181.079791] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 181.096276] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 181.123310] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 181.146046] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 181.156695] overlayfs: unrecognized mount option "˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙0x000000000000000301777777777777777777777" or missing value [ 181.156907] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 181.185777] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 181.195232] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF 19:59:50 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000002004e23ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e240a0101010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230a01010000000000000000000000000000000000000000000000000066236b3640eb00000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f00000100"/523], 0x210) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000001c0)=""/218) 19:59:50 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffe) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='[d::]:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d0) [ 181.217443] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 19:59:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="ebe7f68fdb66732e666134000204015b66000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='.\x00', 0x400017e) r2 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xe) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) unlink(&(0x7f0000000280)='./bus\x00') sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={0x6, 0xd3, 0x1, 0x676, 0xfffffffffffffffd}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) creat(&(0x7f0000000780)='./bus\x00', 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x123400, 0x0) setsockopt$inet_dccp_int(r5, 0x21, 0x4, &(0x7f0000000240)=0x6, 0x4) [ 181.247114] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 363127192 [ 181.272649] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 181.284846] ubi0: background thread "ubi_bgt0d" started, PID 7883 19:59:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2b0f00a69fffaf00000032000000d082d7010000000000000074b44c657415f927b89061e2b596d1b1a0b38288c046fa01fc91866941eb263a0121217d4d46f7a9e9994e054e8a97ff0b64bbd98b11f3ac545afa60e300f9c7f8cbd5a2035f01d73c791e528db1cc9bad7510ccdf72ffa4a37edd856be57e85ed411364433deec9f573e6054e4daf8a8efc0c0e243258f01e0858c086149622666e5624429c6e2ba85dbbd7785f52ce2adf620bf471c4f39f53b5a983db587850730bc720589ead51ead9442d59bd633ecc64a817e6f9cacb4fe63b435f3b03244c70c13b6cc0a3da647897dbd4f8a9065ac2edbb9e5f37438a8774794da02e7bbe699e429d9c6cc7da70a63ac76bfe38e4a743dd3eec753c831977ccc77cee25934db73d52a2a87ceaa3879f36316075497a16"], 0x14}}, 0x0) r3 = add_key(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = request_key(0x0, &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0x0) keyctl$instantiate(0xc, r3, &(0x7f00000000c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '\'@\\', 0x20, 0x100000001}, 0x30, r4) openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x20a80, 0x0) keyctl$assume_authority(0x10, r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYRES32=r5, @ANYBLOB="4e5dc42e29d56d390426951f5a3139cddad107fd499055ca058da865e299c4d22c207f8758ed084da5c9da0e596f13b6fb8ace7a80874fe21919e849d44172f8017b4fe887416c005f64c6b857b90e8fbed8652c6336dd1ed5df108f68fd50aa9bf7123026e14f0dce2616a4c81ad1fc3fb795d4d76e2a5e9170a41cfd6cb3b8ac9f81d352fae63be4128a55c6a41c7f6bd83dc16958256ba606ddf0739692db9cd54f9455d33de915b7409aeaca102a78eac73403b30e88596e978494d00ab15e0ddc5bac907c"], 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e23, 0x0, @ipv4={[], [], @remote}, 0xf73d}}, [0x3, 0x3, 0x4, 0x63, 0x98, 0x1, 0x80, 0x2, 0xff, 0x80, 0x1, 0x9, 0x1000, 0x0, 0x6]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={r6, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x9, 0x800, 0xfff, 0x5, 0x20, 0x2, 0x6}, 0x9c) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) [ 181.296236] ubi: mtd0 is already attached to ubi0 [ 181.304343] ubi0: detaching mtd0 [ 181.312400] libceph: connect [d::]:6789 error -101 [ 181.317548] libceph: mon0 [d::]:6789 connect error [ 181.363971] ubi0: mtd0 is detached 19:59:50 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="6436670f7911b9080900000f320f017f009a44e7f42a1d00c4e21daf8c2c06000000f2d8ba09000000660f388109b805000000b90f0000000f01c1c4c2adbfeb66b818000f00d0", 0x47}], 0x1, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffffb3, 0x0, 0x0, 0x19) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0xfffffffffffffdd5, 0x0, 0x0, 0x80, 0x8, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) connect$netlink(r4, &(0x7f0000000280)=@unspec, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9cc37a36", @ANYRES16=r5, @ANYBLOB="200025bd7000ffdbdf250a000000080037000000000008003700000000000c006e80040001000400020008003700000000004c005080050009000200000008000880040001001400088004000100040002000400010004000100040005000800030001ac0f0005000200050000000500090002000000050002000300000004002800"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4008025) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x76006e) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={r6, @in6={{0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0x2}}, 0x101, 0x7f}, &(0x7f0000000240)=0x90) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x2c78, 0x3, 0x9}) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0xa000, 0x0) fcntl$dupfd(r2, 0x0, r7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:59:50 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 181.434957] ubi0: attaching mtd0 [ 181.494106] ubi0: scanning is finished 19:59:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {&(0x7f0000000740)=""/226, 0xe2}, {0x0}], 0x4}, 0x7ff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x439}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0)) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x28802, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f0000000340)={0x3, 0x5, 0x0, 'queue0\x00'}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000240)='./bus\x00'}, 0x10) 19:59:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="c4e143d0c9b80080000066b8fb008ed00f21f835010006000f23f80f07c4e3b9783105f2ab66b836000f00d8dbc9640fc71c730fc76f00b8090000000f23d00f21f835000000000f23f8", 0xffffffffffffffb3}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 181.587545] ceph: No mds server is up or the cluster is laggy [ 181.642638] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 181.662033] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 181.679138] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 181.693499] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 181.709484] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 181.742240] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 181.823818] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 19:59:50 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000002004e23ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e240a0101010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230a01010000000000000000000000000000000000000000000000000066236b3640eb00000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f00000100"/523], 0x210) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000001c0)=""/218) [ 181.938388] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 181.981705] ubi0: background thread "ubi_bgt0d" started, PID 7930 [ 181.988080] ubi: mtd0 is already attached to ubi0 [ 181.994183] ubi0: detaching mtd0 19:59:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c5feffff0206050000000000000000000000000005000400000000000500050002000000050001000600000013000300686173683a6e65742c6966797a1a000000000c00078008001340000000000000000000000000000093947fe9ccf73103bf274a84d53f0fdb85ccac807472d72f684601ab764a80dc356711e60426356e573ad5d3f8cb735cb5d68566b0b3bdd9bdbd27df174cfc953f84e5149c0a08362a65649670df85313524361115312af47d272eecebd3007415ae1ba3d0d52ee25f545d51"], 0x58}}, 0x0) kexec_load(0x80, 0x5, &(0x7f00000004c0)=[{&(0x7f00000010c0)="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", 0x1000, 0x0, 0x4}, {&(0x7f0000000000)="eba18f92f1b465e1bc73630b0bd9a28c1282228bf14393275a7e5fdd049f53adb804f3206a370198d68e547e03fe8a6cc678391ca41b2e28727aa3307549c5", 0x3f, 0x10001, 0x9}, {&(0x7f00000001c0)="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", 0xfa, 0x7fffffff, 0x1f}, {&(0x7f00000002c0)="9184c4b3d7a2304c3528efb1a3f7d961321f1f0e48b55400aca6cf6f00e918703207750c934b4a3bf0e368fc21c2feb9637b3f5830db89aca183af8d08dc1c9ea998d02b0f96d7d83c0e49220b382ef742c4d8ab1650e5c4d74e1e8e4657060a4101aa3da59d9527d40f322ba9255764c7aefa2ca1374acf7e956ad3bc5d95d42cf32fdd8dd35a3ae1efbf96ca30ebb3e11622ae7a94280cdc6ca03dc0dec74f09c9412b03559270a82f478e4c5a57c977c13a8d4ed90ac0278f92dc5c0eaa96e8841d69d7f30f54959b3e4da1cbb7777bdb9f78", 0xd4, 0x400, 0x401}, {&(0x7f00000003c0)="8b8fd0534d86922c3631552dde037eacd8192f3e45d24a307e4c16e19d9d16eb83e11585355e58e6d05a0781d03973403716e3ae09efc13a72d42ee81cf45a7a9d6d26b9f454595ed36221544f71cadd0461124f49c65caae1363e6719e88cedb9fb6050d2716dffc467ede46032626898ed09fa6ea688d6f838e952bdc3a5de8c1492c80513dd2683d8cdfa5847cfd1eeb2d1d6aee3073c4b31f48ca63dbaa9407f5cfaa3ecd0b33d30b276e9357b4f767918eed42bfc5293b7933b3584fc55c752abb766aa4f115232a7e45ddadea25330ef84af9056e79e99f6e56b44d5", 0xdf, 0x51e, 0x5}], 0x2a0000) [ 182.033707] ubi0: mtd0 is detached 19:59:50 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) inotify_init() pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x0) r3 = dup(r2) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f00000028c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose='cache=loose'}], [], 0x6b}}) 19:59:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:51 executing program 3: lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup3(r2, r1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4e21, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x90) [ 182.332676] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 182.332685] FAT-fs (loop3): Filesystem has been set read-only 19:59:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:51 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x0) shmctl$SHM_LOCK(r1, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x8) socket$vsock_dgram(0x28, 0x2, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="4183a245c3d43d7c8339a28958122033c885", @ANYRES16=r2, @ANYBLOB="000825bd7000fedbdf250200000005000400010000000900010073797a300000000014000200766574683100000000000000000000000900010073797a320000000005000400010000000900010073797a320000000014000200687372300000000000000000000000000900030073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f0000000300)=0xffffffffffffff83) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="68000000100005070000f9bbc7e4b627ef40354a", @ANYRES32=0x0, @ANYBLOB="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", @ANYRESOCT], 0x68}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x6) lgetxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)=""/134, 0x86) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f00000000c0)) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) dup3(r4, r5, 0x0) 19:59:51 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000002004e23ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e240a0101010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230a01010000000000000000000000000000000000000000000000000066236b3640eb00000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f00000100"/523], 0x210) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000001c0)=""/218) 19:59:51 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r3, 0x1c}, 0x10) 19:59:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {&(0x7f0000000740)=""/226, 0xe2}, {0x0}], 0x4}, 0x7ff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x439}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0)) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x28802, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f0000000340)={0x3, 0x5, 0x0, 'queue0\x00'}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000240)='./bus\x00'}, 0x10) 19:59:53 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0xab, 0x4) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000840)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, 0x0, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000008c0)=""/183) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRESOCT], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x560, 0x100, 0x100, 0xffffffff, 0x2f8, 0x0, 0x4c8, 0x4c8, 0xffffffff, 0x4c8, 0x4c8, 0x5, &(0x7f0000000180), {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x14}, 0x8e595b217dbfbc23, 0x0, 'syzkaller1\x00', 'bridge_slave_1\x00', {}, {}, 0x73, 0x0, 0x6}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0xe, 0x0, 0x1, 0x1}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x8, "a06d"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @private=0xa010100, @multicast2, @gre_key=0x23, @gre_key=0x400}}}}, {{@uncond, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0xc, "e152", 0x1}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0xf801}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x1b2, 0xef8182fa5223ce5a, 0x1}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0x4, 0x201, 0x0, 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @gre_key=0xfffb, @gre_key=0x2}}}}, {{@uncond, 0x0, 0x198, 0x1d0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@inet=@recent1={{0x108, 'recent\x00'}, {0x7, 0x7f, 0x8, 0x1, 'syz0\x00', 0x2, [0xffffff00, 0xffffffff, 0xff]}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x36}, @loopback, @icmp_id=0x64, @gre_key=0x8}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4, 0x0) 19:59:53 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r3, 0x1c}, 0x10) 19:59:53 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0x0) shmctl$SHM_LOCK(r1, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x8) socket$vsock_dgram(0x28, 0x2, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="4183a245c3d43d7c8339a28958122033c885", @ANYRES16=r2, @ANYBLOB="000825bd7000fedbdf250200000005000400010000000900010073797a300000000014000200766574683100000000000000000000000900010073797a320000000005000400010000000900010073797a320000000014000200687372300000000000000000000000000900030073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, &(0x7f0000000300)=0xffffffffffffff83) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="68000000100005070000f9bbc7e4b627ef40354a", @ANYRES32=0x0, @ANYBLOB="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", @ANYRESOCT], 0x68}}, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:59:53 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000002004e23ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e240a0101010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230a01010000000000000000000000000000000000000000000000000066236b3640eb00000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f00000100"/523], 0x210) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f00000001c0)=""/218) 19:59:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) socket$inet6(0xa, 0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0xffff}, 0x3018, 0x0, 0x10000000, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8020420}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c5687ad49b5971ffb00020000000000000000000000000004000001a4cdfb45dcb1690ee33c72349c2fdea274d937768b23908c7263df9b87bab5c518b56d166e0a6825902e22d9921d9484140666bf0e400e3454647ac90fca485f50eaf3dfd2517b51ead0797e8ef0b55e511285f9cb38f369d7f5fc15ee240529b36a0da2deb539db153063588400000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4011) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'vxcan1\x00', 0xfd}) [ 184.215180] ubi0: attaching mtd0 [ 184.246045] ubi0: scanning is finished 19:59:53 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x0, @remote}, {0x2, 0x4e21, @dev}, {0x2, 0x0, @multicast1}, 0xef, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x80000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) fchmodat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB='4\x00\x00\x00(\x00\'\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="0400000000000000001b00000a000100726f756e6500001d04000200"], 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001100)={0x19c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4}, @ETHTOOL_A_LINKSTATE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x4}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) write(0xffffffffffffffff, &(0x7f0000000480), 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={0x0, @isdn={0x22, 0x0, 0x0, 0x40, 0x7}, @l2={0x1f, 0x5, @fixed={[], 0x12}, 0x0, 0x2}, @l2={0x1f, 0x0, @any, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)='wg1\x00', 0x8, 0x0, 0x1278}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="36b29d002d2da701ded5f3eab6e34cb17b3c257c674615998c16ec6ec4a604822fe476632412ad0f4e311075f6aabba361fce2ab173d42c71462efbc4f5a5db04d67873095dc67d7bcd1b9abb60d6ca28ca9f5a7fb52a90e37319aedc74b6aaa0119fedd95a1a8241c9c3ee86bcb012236c04d54f8e310dfb011", @ANYRES16=0x0], 0x28}}, 0x80) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) [ 184.358923] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 184.365794] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.382004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.454566] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 184.490366] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 184.492610] overlayfs: failed to resolve './file1': -2 19:59:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5c, 0x2, [@TCA_RSVP_ACT={0x58, 0x6, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@delneigh={0x24, 0x1d, 0x8, 0x70bd25, 0x25dfdbfe, {0x1c, 0x0, 0x0, r3, 0x0, 0x28, 0x9}, [@NDA_VNI={0x8, 0x7, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 184.530246] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 184.556938] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 184.580980] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 184.591718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.600815] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 184.615486] overlayfs: failed to resolve './file1': -2 19:59:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000100)=0x8) getsockopt$packet_buf(r5, 0x107, 0x2, &(0x7f00000002c0)=""/154, &(0x7f00000001c0)=0x9a) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x40400, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000180)={0xf8, 0x0, 0x5, 0xcf, 0x80, 0x20, 0x9, 0x3, 0x40, 0xc6, 0x3, 0x4, 0x3, 0x5}, 0xe) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x400000000001, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd94, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x0, 0x1}, @flat=@handle, @fda}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}], 0x2, 0x73b000, 0x0}) 19:59:53 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r3, 0x1c}, 0x10) [ 184.624085] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 184.644214] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.645303] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 184.668413] ubi0: background thread "ubi_bgt0d" started, PID 8040 [ 184.725726] audit: type=1400 audit(1592683193.620:13): avc: denied { set_context_mgr } for pid=8049 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 [ 184.738433] ubi0: detaching mtd0 19:59:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x9, 0x101) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000004e00), 0x60, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x6, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000200)={0x1, r2}) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00), 0x60, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x76006e) ppoll(&(0x7f0000000080)=[{r3, 0x580}, {0xffffffffffffffff, 0x200}, {r1, 0x140}, {r4, 0x404}, {r1, 0x4401}], 0x5, &(0x7f00000000c0), &(0x7f0000000100)={[0xeb2d]}, 0x8) [ 184.776113] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.813778] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.814047] ubi0: mtd0 is detached 19:59:53 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000002004e23ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e240a0101010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230a01010000000000000000000000000000000000000000000000000066236b3640eb00000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f00000100"/523], 0x210) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) [ 184.840610] binder_alloc: 8049: binder_alloc_buf size -592 failed, no address space [ 184.845524] audit: type=1400 audit(1592683193.740:14): avc: denied { call } for pid=8049 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1 [ 184.867450] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 184.914238] ubi0: attaching mtd0 [ 184.934114] ubi0: scanning is finished [ 184.952625] binder: BINDER_SET_CONTEXT_MGR already set [ 185.017705] binder: 8049:8063 ioctl 40046207 0 returned -16 [ 185.101730] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 185.109788] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 185.116432] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 185.152180] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 185.165077] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 185.172759] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 185.184348] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 185.194050] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 185.203674] ubi0: background thread "ubi_bgt0d" started, PID 8082 19:59:55 executing program 2: prlimit64(0x0, 0x3, &(0x7f00000001c0)={0x9, 0x6e7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000003c0)={0x38, 0x2, 0x30, 0x0, 0x9, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x4e24, 0x7, 0x4e22, 0x74cf, 0x2, 0x20, 0x20, 0x29}, {0x7fff, 0xff, 0xfffffffffffffffa, 0xffff, 0x1f, 0x8000, 0x1, 0x4}, {0x8, 0x1, 0x7fff, 0x9}, 0xfff, 0x0, 0x0, 0x8d319e9dd603cdb8, 0x1, 0x2}, {{@in6=@private0={0xfc, 0x0, [], 0x1}, 0x4d6, 0x2b}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3503, 0x1, 0x0, 0x7, 0x6, 0x59a, 0x9}}, 0xe8) getsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000180), &(0x7f0000000200)=0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x8eb46, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='mounts\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r5, r4, 0x0, 0x800000080004103) 19:59:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r3, 0x1c}, 0x10) 19:59:55 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 19:59:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x18, 0x30, 0x300, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4084) 19:59:55 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000002004e23ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e240a0101010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230a01010000000000000000000000000000000000000000000000000066236b3640eb00000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f00000100"/523], 0x210) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) [ 186.346725] ubi0: detaching mtd0 [ 186.364335] ubi0: mtd0 is detached 19:59:55 executing program 0: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x2, 0xfd, 0x0, 0x0, 0x0, 0xa, 0xb2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp, 0x2d00, 0x2, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=""/56, 0x0, 0x38, 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x6}, 0x1561, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x10) write$FUSE_WRITE(r1, &(0x7f0000000280)={0x18, 0x0, 0xfffffffffffffffe, {0xc6}}, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYRES16, @ANYRES16=r0], 0x4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000002040)={{0x0, 0x0, 0x80}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nvram\x00', 0x800, 0x0) r3 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_mr_vif\x00') rmdir(&(0x7f0000000400)='./file0\x00') 19:59:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r3, 0x1c}, 0x10) 19:59:55 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsetxattr$trusted_overlay_redirect(r1, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {}, 0x200000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x10000, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe0e]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup(0xffffffffffffffff) getpeername$packet(r5, 0x0, &(0x7f0000000040)) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000010a03000000000000000000050000010c000400024000060900010073797a31f4000000080002400000000000000000000047abdfa5e0c2c908128a00"/77], 0x48}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="6600ff00e0ff010101040000000000", @ANYRES32=r7, @ANYBLOB="0800020000c4feff61c1a1b9b68a1be68448a27a6f7ec26933214f22c867e2a1c01449ceac7627454e75c970e91a0cb4dd705e4b9bf9db8e3bfdd8dee1d7bc69029e222a146e44bd8fcd89fdb7188c1882f20acb41064922b22f0400a5449e03e3d7bb2b0faed40f13f9782aafa1fbe14f7be3345f5c7dddc67b9023f9118649a359039a0344197fb4cf496d75745e82757755b26d91dd3ea6fc3f72da7c38bca7d8d4dd1ababa2a7969a6f9a6169de1506449d882a6f15b997562a326626b9a0f10c428c92f4c77eab9b3db0f7f1d14441a34fdc3b2eaa5ddb93385fd5de491bafcd68c2df6affedb4e595daa"], 0x28}}, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) 19:59:55 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:55 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r3, 0x1c}, 0x10) 19:59:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) [ 186.780563] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 186.921869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:59:56 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsetxattr$trusted_overlay_redirect(r1, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {}, 0x200000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x10000, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe0e]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup(0xffffffffffffffff) getpeername$packet(r5, 0x0, &(0x7f0000000040)) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000010a03000000000000000000050000010c000400024000060900010073797a31f4000000080002400000000000000000000047abdfa5e0c2c908128a00"/77], 0x48}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="6600ff00e0ff010101040000000000", @ANYRES32=r7, @ANYBLOB="0800020000c4feff61c1a1b9b68a1be68448a27a6f7ec26933214f22c867e2a1c01449ceac7627454e75c970e91a0cb4dd705e4b9bf9db8e3bfdd8dee1d7bc69029e222a146e44bd8fcd89fdb7188c1882f20acb41064922b22f0400a5449e03e3d7bb2b0faed40f13f9782aafa1fbe14f7be3345f5c7dddc67b9023f9118649a359039a0344197fb4cf496d75745e82757755b26d91dd3ea6fc3f72da7c38bca7d8d4dd1ababa2a7969a6f9a6169de1506449d882a6f15b997562a326626b9a0f10c428c92f4c77eab9b3db0f7f1d14441a34fdc3b2eaa5ddb93385fd5de491bafcd68c2df6affedb4e595daa"], 0x28}}, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) 19:59:56 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountstats\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x10, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) times(0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 19:59:56 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000002004e23ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e240a0101010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230a01010000000000000000000000000000000000000000000000000066236b3640eb00000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f00000100"/523], 0x210) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 19:59:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:56 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsetxattr$trusted_overlay_redirect(r1, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {}, 0x200000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x10000, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe0e]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup(0xffffffffffffffff) getpeername$packet(r5, 0x0, &(0x7f0000000040)) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000010a03000000000000000000050000010c000400024000060900010073797a31f4000000080002400000000000000000000047abdfa5e0c2c908128a00"/77], 0x48}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="6600ff00e0ff010101040000000000", @ANYRES32=r7, @ANYBLOB="0800020000c4feff61c1a1b9b68a1be68448a27a6f7ec26933214f22c867e2a1c01449ceac7627454e75c970e91a0cb4dd705e4b9bf9db8e3bfdd8dee1d7bc69029e222a146e44bd8fcd89fdb7188c1882f20acb41064922b22f0400a5449e03e3d7bb2b0faed40f13f9782aafa1fbe14f7be3345f5c7dddc67b9023f9118649a359039a0344197fb4cf496d75745e82757755b26d91dd3ea6fc3f72da7c38bca7d8d4dd1ababa2a7969a6f9a6169de1506449d882a6f15b997562a326626b9a0f10c428c92f4c77eab9b3db0f7f1d14441a34fdc3b2eaa5ddb93385fd5de491bafcd68c2df6affedb4e595daa"], 0x28}}, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) 19:59:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:56 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 19:59:56 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsetxattr$trusted_overlay_redirect(r1, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {}, 0x200000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x10000, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe0e]}, 0x45c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup(0xffffffffffffffff) getpeername$packet(r5, 0x0, &(0x7f0000000040)) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="48000000010a03000000000000000000050000010c000400024000060900010073797a31f4000000080002400000000000000000000047abdfa5e0c2c908128a00"/77], 0x48}, 0x1, 0x0, 0x0, 0xc0c4}, 0x40) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="6600ff00e0ff010101040000000000", @ANYRES32=r7, @ANYBLOB="0800020000c4feff61c1a1b9b68a1be68448a27a6f7ec26933214f22c867e2a1c01449ceac7627454e75c970e91a0cb4dd705e4b9bf9db8e3bfdd8dee1d7bc69029e222a146e44bd8fcd89fdb7188c1882f20acb41064922b22f0400a5449e03e3d7bb2b0faed40f13f9782aafa1fbe14f7be3345f5c7dddc67b9023f9118649a359039a0344197fb4cf496d75745e82757755b26d91dd3ea6fc3f72da7c38bca7d8d4dd1ababa2a7969a6f9a6169de1506449d882a6f15b997562a326626b9a0f10c428c92f4c77eab9b3db0f7f1d14441a34fdc3b2eaa5ddb93385fd5de491bafcd68c2df6affedb4e595daa"], 0x28}}, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000640), &(0x7f0000000680)=0x4) 19:59:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 187.554821] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.599504] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:59:56 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 19:59:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:56 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000002004e23ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e240a0101010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230a01010000000000000000000000000000000000000000000000000066236b3640eb00000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f00000100"/523], 0x210) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) sendfile(r2, r1, 0x0, 0x20000000000000d8) [ 187.641430] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:59:56 executing program 1: fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) finit_module(r0, &(0x7f00000002c0)='syz1\x00', 0x1) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00') r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000884}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x9}, 0x10}, 0x78) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x58, 0xc, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x16, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x48010) 19:59:56 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:56 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 19:59:56 executing program 2: creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) ftruncate(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x8) fcntl$setstatus(r2, 0x4, 0x46000) io_setup(0x2349, &(0x7f0000000240)=0x0) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) io_setup(0x2349, &(0x7f0000000240)=0x0) io_submit(r5, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}]) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_cancel(0x0, 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="5c5c2d8c9fd55aeab7866352696dd58170d59c36b5dc855a293f9d2445461933779c35cc47749e283a565b619f3d43b2958a25e4db4add909046a0c8fce1d8ab146ded9dc60d314a5afc65eab3b84c52fbd7af925505b8abee7e1f4ef3c01bafc93dae795c2e0dc003a106b3bee6a8075735dbdad8266a07d44ab06707668214fadbfda77f1066d333f9cd3aaba43abc1f13d6db76b138734234b67f50f03009271d1308240f86d23e5e127c4c854e9eb8d4268ea8c66556a049ab4d5f08294f4537702564fd8d289fb96645d6f66ff6d574599a77f449d2c3ca33158570d7823ad49c04452d65404d"], &(0x7f0000000280)='./bus\x00', &(0x7f0000000480)='cifs\x00', 0x0, &(0x7f0000000040)='\x00\x00\x00\x00\x1aq\xd1SP\x8a\xec\t\x8b\x94\xd8\x1cn\xf7\x91\xf8pY\xe6\xb9\xeeJ\xa6\xe3\xa8\x10\x8c\xf4\x86\xe0\x1d9p0\xf9\xb9\\\x89nnO\x00\x10W\xc1\xbdn\x10\x9d\x14q\x12\x9cfC\xca\xc7^\xb7\xef\x87=>\xdc\xd8?\x9em\xf9\xf5\xad-\xe9\x1b\x8f\xe7\xcc\x06\r\xd5\xd5\x9boO\x00'/104) 19:59:56 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:56 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 188.090310] Unable to determine destination address. 19:59:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:57 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 19:59:57 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r3, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x6c}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @private1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$VFIO_CHECK_EXTENSION(r5, 0x3b65, 0x7) 19:59:57 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_mcast\x00') setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0dea4ae64e2c2359", "60b2befade16ecd368c0b987b3bcc475114dbfa271531c45282bbe553c5b9a2d", "904d6058", "b75651bae770b621"}, 0x38) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 19:59:57 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 19:59:57 executing program 3: getpid() capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000d00200009800000000000000680100009800000000000000380200003802000038020000380200003802000004000000000000000000000010000000e00000020000000000000000626f6e645f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000380074696d65000000000000000000000000000000000000000000000000000000000000ffffffff4f970000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000380071756f7461000000000000000000000000000000000000000000000000000100000000000000470d0000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) io_submit(0x0, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x97, r0, &(0x7f0000000240)="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", 0xff, 0x113, 0x0, 0x4}, &(0x7f0000000340)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x601, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000200)={0x2, 0x3, 0x7, 0x1, 'syz1\x00', 0x9}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, 0x0, 0x102000004) 19:59:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:57 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000002e0007031dfffd946fa2830020200a0009000000001985680c1ba3a20400ff7e280000005e00ffffba162441caf0da3b40c925234476d0b80ca0aa1c0009b3ebea8653b1", 0x48}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r2, r3, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmmsg$alg(r2, &(0x7f0000005c40)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001680)="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", 0xf80}, {&(0x7f0000000200)="0e040e039929b4c8ee952824351602a65abfbe73aa8700523dad02b00c9161f1653b7ddf9496a5c824172303c01babd0f44da2710ccaea2b0be573afa41b8f8cf0cf26fe4e60f6c56e98c798969efc340894d59d4754ec2c88cb3993c6e167ca458654903fc009692b044655cb8c7a0a2ef7febeff2b3b108082834cd4aac49598a1ff4458dd4b6156384ef9dd013632b7cfc42a7afdc1", 0x97}], 0x2, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffff01}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xc4}], 0x60, 0x40090}, {0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000003c0)="e2aa2c4f6100daf0920d8abd57c24202b053bf3c636439473f3d58347bf320832a2e858cab0a0994c0d362c55d1ebb51", 0x30}, {&(0x7f0000002780)="d9b1ec04ce2efd5287576076d48a59756cf91a008b1ed21d06696dce", 0x1c}, {&(0x7f00000027c0)="611b6f527131d980e6c183e7c44addaec9223aef2013412745cfd05e0dc6fcba0983a3c8bcf7ac7b9b121fd64925506a49da669c3b9ac1be81b09083bb010d8e8b4f52046c814645b20efefb886ae7e7edc104123d5105e5fa1b65dd8f41549a57e6b0d4d27169a0f636cb8629493b8c4644a5ee93cccd7babd8576646afae", 0x7f}, {&(0x7f0000002840)="7e91e1c89c4fa7f944b7f522786ef1b997a37a4321308f56d891753f1bebebe96005bf7482cfe26edb0760c58c022657bd5a61420f57b45b042085f7f47843ce4ea658b83cf464c20b50a04338e30a8e018ddf36097c5cd041ceef5003500d78da8d1f96c09010a92ac7a996da2dcdea0bfe1875b71e4d14d3a8844a1314b774588369b4a00f0f413c7214bd9ec82636d560e1fbfc47d5b0bdab5b3a8f8009894715be2f60500d4d4f7b8c043ae6ab6beb8e73fa156ffbe9de985f4eaa6359f004a909e962f1bb9f3ac70a7f1bcf6cd2f0be9d2c799e1f69098547bb39e2aad20e1bb08a547179932cce4bed97e8f5e34815a712a055ce3bcee93485ae52cf6aac885d864f36d484f878b23e2cf9a5a0bbd6235e8c15257d4c989d36b57ab4904c61a80dff8f93bcd989841e31c61ee0273ac99847a17765d808961c178305a3debf3db1e2013b6bfd973f5aa60cd0d761b64ce3f19e7183218fccda2c5ea610c1efc2e43e941c5a7f9f8210f6665c81f88e06864d2b25c23e63daa18e3aec694c21d160a8909f21c51fd866f5406319743373fcc22acd66047e75c5105d058a9b0ea82038547c51a4dd2f8668150cb49351aa7e02c3166b6c0acd128356bf5d57ef5da1f867f6524a546deaa820d0520a043528bc7ff8250c09fd79ff7ceadc2462ef77ac5f60a350cecf246a0304e4c22e2ef2b29a404af23a9448a8a06c99ab040d548e3c68ed11170f85eff72d3507e8231e45d1e76407b479bfccb749f7a5285869a33e242478d502841da33bb9a289b3aef3f9aaf89a69cbd9b989accfb5f9ac33383ed743eb0151d2a95dc7ab92728c0b2c8eda92d24446eebc45f54e68427ee8329897b53b17b245481d173eb33b33e414cdeaf5ebf4de9efbe150bc86b8038855309a00c99e2966a3b492a9c4ad64e1b85deba3424b17cddf390eb2c0cdebb0f026edd8b6a4c2ada91aec06187a45b29d9525bd1f942e32d6758de742b3e76a0f126c403215a0a83f5040ca5b706414c0457cc9fbce9f80fe5f9529d574b8d538cbc1349721c69b4125b3bf3d055debbf81101e4eac085fa4738c4cf9805e8f43bfe88fc57e3fce2e530c57281eff23c3892546867165bae849e731df11d185100070222b1133948f398939b54354d108c3a82da9bf913c67c8764ad55314081f6c8dd7c6e65763c1af6cf4e55c0c4d890779a52d2086002478c87433eff8dc420012d20a848272e761e6b1258ca10bfe5815e44dd84e68bffdae63a05c493273a88ac47e701210651ac277f750504b29cd95720960bb40eaa9587069025f47e3f3c9e93a81a5bddab0106f690db0dc4e61aa0f68837eee0c4f2badf6db5e8346baefa45ca2a4259932f786764939359635d5aaa40db72ee22bba8cec2dd10da55f6742e9d43595c162790a5c49707aff0531c5b30de7d6f846b04ecee52696403bd3b4fb7e337075b028209da3ff6153592a54999390c225eeb0644785c0f78ab9dc6f9bf35c0edab99bf23614398d0509257c2b298b32117915ad9ca5ba01316866f9fb79e3fb3f6cac39780446c6a260b77f115b2eff042d4818f9f2b09a89f1f58bbd3ca576f751aecf5c570e3dad2a65198683444e2930598bd97df5444a227c8eb9505d6c0bfbb750ed540a3c2c1ea0252d4a49cc9911ea7771a3838989011081735b32649db254eae3f50d8bd5bd869b2d806f6102cfff79b2e7f5e375e617e6271ac8c70c238edfe929bf735131afdb993b41a007e9ee7e3e7ad18f6530359e49cd735ae375d57e3a510e896b9102aa8d00a115cfd0143ad748fa61a1eddde86a75bb90f1e54dc8c91398c42b65f8f2482ab109e602986ad3840e0e74bf9a5d6a393bd01366b90bd4ab9a803c0782d83e3b745a6d6fe27166eee97159c63ebd9ef2c4cc58c43852b3fa907a834286b5a604d9886ecbb8a5bad79389868bef7dfe512a5d5210857036f8157324af387cfd23f78ebfdf828ee12edd1e3d1e4c912bba18d387b26a0ece2e4ffe08f250264d4b8cc43482458ca4015d29a9baf5670b84ad0b7b0606cfd37ef00c9003a63ea1fa5b56dd662687dadbd2508ce78f9020b0f357c3e880240554f3f43c8acb65bf758288c4ba872e3b325c331bdbf52d4cac4ca6bbc961e5ce8fc5fb5dfaa33ffe040d5e033be63e819998f17d347a3d2b33bd7bc5df407d47882549c24cfd466be864c7e01c9343a32896de7e1a0a5595ed4f4a3cde890eb30dbaa444496a3e6a21681efbcdf3a539a6b93fdfa4496bac73d036bde77a3fbbd769e9778a8bf1ca85c8bd1308130738da90d1b556f68233d9744e3996ec5549b938e7e2b1e089108f134f4b0375ccf5f6efa02d011fd46f5931d1475bd1b9a21abce228639a78bab6ec294d9d6007b4893080666eec4c9f3146cb30e0bbbe90eac80089603a07c33983b139c41effc184197afe868f647a467152a88b3583dfe8187f7af101161465fe1c871c745aa1fb983d16b91985b51ce18e837c0b7483466f8851bc0023789678e5b7a540d38951184ffc6e7b169a3169ab105726c9348f256daf03d0a8be9b95c04bc459f3653c6c9b2fda32246034b070ea6efc7c6c639be70f2df6a491d68e56342b5cc888859c1fd57ae7b40cde7c4b93d04b2ef7472f24d0e24ed66c4e88a007d1215188b5380bd75572f6678515baa260d0dc1ad09fbc37ae493face4e25b51d101bfda57c8ada67c0f4ac34b5f26b6050e49788f762ca7afd95d0fe4b49f412acd38a78c8c15a86620396a7f8345ee86f014014503b3c2ed24925078b9b597e986759524734e8b79dd3858ed96d6c2be3454f8d7f83d2936028d8771d530322b1916b1bc07569dc7822dd02d3986cff22b4289f0f9a12f67df66d041e11510c908af75e070184247240ca725a1f4ecbd7514517a5ea953a2ac1d11f688461137df00a406dfb1553e93f058b1f358a8cbe85f475831a825fa3ff199e3bd752a729d37afc896b7c3055b4250dd7d491f96112a574e80f91979b9e6b9193c80867a0fccc78f39ac594a1f7a0a29c94e7f474f68daaefefb57d49bdedecb4cf5d636a47405b1af1dd74103de2cfc2f1f3adadfb5cc94fc0cf611bb796c2b6a5af3a9aa48ef32ce56d1f11b86d1e01b7186bb6a880f117603a03458ebbe333c974d018d29ee9216b90ab96f576bc5c7f24b833ed02ece0b56006b02eec76c3ce2d9378b2a4be877253f490b72e7b8431d8c03e4bc316e9f2fb9383f3de4bc5686242ff9dfccb971600f1cb37f98160d12f6cb87999a3ee0fa797d4ee7452bd7dab80abd37986af55c2fe3072763824830d247babfe8bd8659a35754a85556ce7b741c26895ae09547613f80f40e7b7141f135e6207e1f51e774c428d3d8c9c335ef606a9a7c709e7c679590541722c54cd8ac43435bedfde9af29f2dd169fea1512d93bb5a546492ed58af8fc138f3c3764d2b311d7a199bf4bcde695b5bb53634a96a2683a69b4d286dec5c758e976fe2b3fd7a1901f569f391fc887d459802243a80df23e471c4d59122bc070d3eddff81edea7fa8d4e4d6753f91c3c4e2118c44d431928f77bb2d30fb6c53a2693f2e7e88104b9c2151fd518a61a569b588547593c8c48be834896d971aabc6702450c1444fb24d06c344d33ae03f851cca5fb7d411dbe0d8c6b7357b5a7d5dc029a99ed5fb60e90a81e9331708e9939b37b5bec5e6c7cf0132420268424d58edd9d6da05faf7a5481c5af40a55036ef91820afae45c01ee38942f99d0d0f97abeaff36574bb15da1af11f14b2a14a9f69d784b8ade84a3b9f522743194a8f09f892e0fb38820ed6ef6f29147b92dfd00466a9020a63da6d585cc4a6103672320473fa5bc1fab7bb63ce4b40c47fe1956afd783a0c9f31cacbafe9599ad2b19ea7006a9311e8a03c437421f4f1098cbdc9c4169c92e358a9ab258f6b3125186b6d5bf2a30210ae250471c48e8923f1a481879c923071368819e610f09e77fb720ddf40b1e14b9dbec1237defc430def9ff4f46993d338d3a8977edbc8b19c9bf4417293a4d70ebc9648dd676457d1411bfdbd12517aa9e86b5e7689ea45747dc563f7f3fa890da1b20cd5d606368e12c1401cd677f2c68ebb591e162c03e674402874e91937e9ae1e8b1117e8116fcd15576b9b09c0c260a374ad4263b162393d03c1f3e7795a5d19442aa7ceb6fa15d856daf06859363a41e50aea9098a0d5112f59b8f2389822b55cd21ed7ae9003567f4d364f63e6a5537cb63dc94dca1a7e142aabb7e688d2eb37bd9dc36b1719bb3bad9a549b62fea6b18fe1af10498c8f42e97c9ae6984f268f6f37500e7e16ccfb7f1940c3d7962f78a4f8a56e10d67a2acc67334c0908d275206d87873d17c9551874ea42093ba0c1b36a8b03504cbd9f76e254137c1db88f0cae6d9c867ead708656c547667677c379c8d3c7fa4a704a6c45329d16db3a58a000eb9fbf39f629d99bbcbf14e5e63b6a7cf0b1fd0e37121151162a4fcd52002c59066b88f33e9fd058faf528c274d5c08c62556f2fe6bee631866ab9dcf29cb7c45b5d44fd60e2b287dabf385b9f6b5692fa1c1fd7ffbf20d0fb5ffe7e56acd9154fa407a9ed41cef80ec2477babf8467f1bd7463bee55a5947200b19854757df167dde7c0b7e66fa57a4c9a32c81dabff227c6ba692e94b51228578d1e59942d7aacd1d59c2f9e30a22c88d7dd4e2d9d03ac7219e5dfc913b38fc3f8dc3043ca1409377677641ae6d313668b5c3c11aba1aa2a12787cffe59836455cd62e2e0f27b23df2cd90ef9400099ae16c01175bfc0cf233d545caac677c029b6bd940c625b02d23252fa139f4c4605a869ab57b9f86b56d007ea24f7b0669b01081e1a66cffe919d033b8ba5344efdf864c0ebf51a92f78d44b133853ff9a1bf0b423d34d443a68b1da3d137bc3053152b7916a209cfcb0a6168d6bd00d860fa5875316cc9782ed1280c8598d3b1eeb9c774c30529261847c2622ae83ff8605606bd102e807ba45b8359e0bf654471550cf1c7e1a2da1724c479da572ec4a9a386f2b57ab61c9233fd6de9b3aa58cfbab6f073e3604b922e792ca2e542baeb32dab6f1a18edada881dab22e09f1f91930a7941f5ff1aade58ba0ed6643ba0943ed816eee2521cc6c53356a52e4e652fc7ef2c48012c4b05e7fc27b8426a8e8c4a63f48d5ce3ed5e038d375fb9a4f66492f628ca1c07bd95c5d2f5156eb555ed81d8a08ef4125731025205f1f39b9923bc2bb78957a203b5f2c7a1ddfb8b05cb677616f49819111a4fddb07f8cc96702972850b110cde8e26d589e903d4c30b8d7ddb79f231b8f9c1344af4836c25ce4735c2e2321ec68665f3396dabb3138f30b9f3ddc960a22956e792bb25dd58cad52bd7498283ffab8b1a799b772a1f1173e1c4b6133ee7d7880786f1b5066720391eed85af86c5f481e32e4ed51398d716578015c38777e57f703824b1a78a36873b11261d88c516b8ddc34fa4e140a7e608886aa9d3d6eb65dbeb5667a2ddfcd1619970816a80d86f45ae868ce85dc84885c1ca6f4d201e835852dcae4cb416cdb7800f839cefdd33dcda0ebee7c9cd394d6c13dd3537d35fae0b8c928d440b22a938442381e25d0ae02379e2739f77051ea3bdf3b9494d145e25ca2e7966c72cc7fd213018a4de65f198917fc8e64d3dbd7ee76", 0xfb5}, {&(0x7f0000003840)="866bfe309f238e0ee34029d675188be404a5f27b5a71c9e78c71286f2529e9b1a953ee9afcfa7d19b2054aa07e03d445b4fb6992d209a12ce72a4f96295b4e7c06a1d83eb0bbfdfb632753c4c8173c4270426adfcc4d5cd3f5220d5b8187f3909a53abaef5e87a00b481f5937e6e174a9218e5e6777eaef0fba9dce796cd7a29f6202f7e32d6ef09b61d04c9687f8b4082669455e5eb0305a866ed8d68bf5f7e333c0b869a7cce6d9a9f0c7522b7d5c10c2ef6efe85073977842bcf2f3f7c904a10a7d1fd2b6e007240049ab8a288f", 0xcf}, {&(0x7f0000003940)}, {&(0x7f00000039c0)="915be1b9a460c248a3606330c9128e3f5e102f6a74a9cc10dbd64ed1c048dddd3b634a84", 0x24}, {&(0x7f0000003a00)="cc40ad687799de3a8f55b630336c16b48dc5c85905149d68afc928eb7f41c0465c9acde700f4ecd2ca2905ececfc4bcefa98fcf2202aac6aa53652045be2eb4abee766f65501d3935e9d349094a46f304be3967f982249980f", 0x59}, {&(0x7f0000003a80)="45ec6d76ebc911f11b7c25280e0d6ecf02fb377f6a4ee1fd2fd5ba46fdf3c3261d148266bf59c588ce8a41755efa54cd9799d04cd48a5db4bc1336546c8f4eb98e1abfcec0bd59151ad3fc19eed2f805db5cdedc80e29743f808691082f57e40ec5da9fdccadecd560932889de7fd3562496c5d596066183377add95830f1ee768fb68a6ba75f2203c78552b3097937bd1924ae1f3b41ea34928b41406e10710ec26287e08cc53af48510aba41e30fde736c4e5dd19f857b37fd04dc6b2f79453f17ad408a03de533e09b990e3093bf1d30bb2e9b681c4b699a9", 0xda}], 0x9, &(0x7f0000003c40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2fad}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x20}], 0x60, 0x20000000}, {0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000004000)="7141541b0403aba7a3c7cb297e78518551b3065f9c74396d69a2260c6d42d34bb31267e2ed80f69f3b0bb42b92c4680c971eff05d7b0dbeec33ab2b82930a4834f063b673fe4481ce55afcd4e9284fb937892859601bcc69ca42a343a0f5c54f7312f85aef5b7db237bcb654d6eee8d73ccc4d0b22c7e8baffbacf04a1be4e7b409c3661c32b7a6fc4a70b2f", 0x8c}, {&(0x7f0000004180)="d8df", 0x2}, {&(0x7f00000041c0)="e2a305d410d854b92b3f054e7377c7182c9efa255ad1376f9136377acd3024d1a1011c5469fcaa7e26f2d15eaa7b1dffb00160a5f036a407b6fc89a0dd77625a1044df038efeebfd1b615d1819bd784013ff", 0x52}, {0x0}], 0x4, 0x0, 0x0, 0x4000040}, {0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000004380)="43fa4f6d3f94890d3dda8ae2b1162352dc68ceb062dacb0d14e6e1a4b059289180d3ef70df624776ea13ebec55872e7065599bb142e35637586da85121edbdfadc23cca3516308c042657011715922950e1f4bae0e22abc2f00ef48b39271589abdd2585d832ffe2dc48d341a9a7456e6e8ba2f626a894c585f071dbc73df11ab213bb45b1ab82e698591e29eba287b527772be9446b53cffbdb23c8c2c5c4eef6b238acaef38bbc97a902a36f9aeed30ddc47d734a8cfd72a48ab8d7b5fe56c5be9daa9bd09d4e9693edac0b3b15f24f8f7a58982c065f711e53d064203a42ef995865f925815d3a18b1332e3b9f2", 0xef}, {&(0x7f0000004480)="6c56d7570a8d552b9ff259ccf2d4a735e17160f4e2aa3fea313ea32440be0ac76a3f9a08cbcf8af599a70fca812d2a7bebf6c450b80e9acc80f9d085ac064b450ae79474edf2542b13bbeeb7", 0x4c}, {&(0x7f0000004500)="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", 0xffe}], 0x3, &(0x7f0000005540)=[@assoc={0x18, 0x117, 0x4, 0xb1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xaa0}, @assoc={0x18, 0x117, 0x4, 0x5416}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}], 0xa8, 0x24}, {0x0, 0x0, &(0x7f0000005900)=[{&(0x7f0000005600)="e7d3c8125185727cc273152910a48e46b927a1731c8b4e962d844203d85b545cdb34b36d9b09b963b9446d667dba248105aa96055ecdd6c90d7ac96b7ca4ef98a32a7a3df28c69796866432d66cb34d3e1d2655ed670c3ac8c7e8d2ecdeaf377f1ec61d1317f926fae455fde43cb2a54c35c666bc9654c9f9c10c626b2e85d45a223db302158bfc8e4ab3738a020d6d246fec51ec7214bc65301505fa384a95f97d975970f97a57658e7926469f041a385687801f3d5ba1bcb807b282b0347e8f6734539360bc5bc9822f1b72b331dd42eec6e", 0xd3}, {&(0x7f0000005700)="26675256a49ef585c1fda6360059a4e4e2d1fe656e5e3939d1c16994729f82ed7b79e4545d9ad8e9272f2e4b14971652bb81753096966977b343bd0a535c2806174df84a0c15c786acca74c450cd95382c18be97e97bac1e489a890aab0a6f2387d50a0a08e83dd1c9ec6eeccb5f7bfc08e702eb15d2b68e7eb6318589a5bc15a6421d99173ac6cc6e575665b887b12292dcf7525da7e0b31c8c64030e5c2d81458f9796", 0xa4}, {&(0x7f00000057c0)="cf4506181f16c7363b6dbab8f107deb6311f16bce90a979bbae36e5e8260fbd7414a9bc9850b14061bea153177e15fc1bcfc4ba974d446a1bc0473973bf25ea100bec567ddaf", 0x46}, {&(0x7f0000005840)="f8588013c6007d6bc104a9f168bb60528d527555fe4694ce0d3490303475b4d1de338eba83c24d68537554481f96cf362d6729d436438a6183ec35b49bd45b01a4e219edd7c239d5750f2773023036feb6e8d01af2e853918ca45efb654c5562c2432f3a6b9ff641d5cb6ba35c6eb9da603916b2b9df16302c0b71390e6ce7cda12eb074ac2dd18b08b9ce55bf9372cd817a63c55e2afbc6330cfdeaac2a18d9a1f4d94b1e", 0xa5}], 0x4, 0x0, 0x0, 0x810}, {0x0, 0x0, &(0x7f0000005b00)=[{&(0x7f0000005940)="bb4a900528c7d73420584b0b1cfd54e99ebb70f6722aa71bea01ee2aa42c3e12bb726de6379b7d85e0bd403e0587279f6cd03bb16a215012344cb98454e91b0a0a008bf41915b72064bffd391d8b97d6f0ef2dd92774d918c9564fa53752b6942709aa0cc36884aae7a21527b6599518dab19797c30ce782f555b26cb664cbd52c28e10e910c699eb20fc979640893e3565f71099be1ed081ddc0dff1719", 0x9e}, {&(0x7f0000005a00)="2bbff17bc91499d3d86124b73f7c016bfc00529cab5f9e8510f218e8f1959fe4d89059", 0x23}, {&(0x7f0000005a40)="820d0f8417f9bb3704e2edd5e62d4ef7aafa5cc7a2af09f0175047d5312f26993fe560e6e0ea689c8703fe2fa52264eae32a2c43e957f9f74ab9741dc8e8605926618d4ea6d5afe220691ac68c0d10c9c24af30fda8ad32fd9734378859cb548413224c7ba98fb82a4ca42238f781493d0e2889df4", 0x75}], 0x3, &(0x7f0000005b40)=[@iv={0xe8, 0x117, 0x2, 0xd1, "37c662d4cda92843752f58334880e1888be8bd96d25b79c42d91f0d31b3c9f3c0fc6f6d99afb8c4664d123010309ed2052539b36a3237553f6b32a7bcca885f0209e06e98d7c64b38d343b69b2844b12c0c397ed5643076470db0c4ba99c1898df90cfaf58ce1c9625ca782c93c42001cb378003d534d5c99b549bd4274a3ab83391fd4561725acf48598d09e2aa071324d39d161f129ce2b0592e5368ec7d9d9c37f47356d4aa845627b6b5d43fe371b809055b7b9d9c09437315626a3059255ceb691711ced28f5fdaaf8f7d37e0fd8d"}, @assoc={0x18}], 0x100}], 0x6, 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) sendmmsg(r4, &(0x7f0000007900)=[{{&(0x7f0000002600)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x80, &(0x7f0000002740), 0x0, &(0x7f0000007a00)=[{0xc0, 0x10c, 0x1, "3413bc8c3eaebd42ba9455574069eb76c1a5d43d747b4cd2da563530e8f91739b53b4070acdfaa74b6b53436c99333bc03a28527bc86e08bc37917fe7839f6c1bfcf46cee3e97fdbeb8399a6f7a521870df805f6f0ca2afa085ffe1497f8f120576f2a68fa18b5b52d22659e21e7b7d1bc0a109e53a5544ea65f97e0b288bbcd2c928abd4e5502d250d029f7deac92a9f2a4d4f66596177bd45d91e555e70677a8afd916aee75fdc870425de5f"}, {0xe0, 0x109, 0x5, "960250124999354063ae480fa9c8c4a99f554e00740106cf588831ea8fa556c0a1788921fdac60b5194ce5a7d57d6b132c544b9dc37c55c4ebeb6331c094c69fff43db0e9170b98af6728648e11fbe3692a1a4ce1da272040e1b066d1d91f73ded102f7b1a0e8979cd3629769e6e2703d12d46b206b9f610d8287b2cc0454209c433d80e1ee169a68073f98b3b56c04bb3a63ab4f062698430c54005aeca1583b08d6038eaf0c8008d06f326d13532064dd20a4c44c0a29adcedecd110d274a9d45cf68df6d8d2e7fb29b3b156d2e737"}, {0x30, 0x107, 0x9, "f0b627dce5fdd7be79e69c59b53f7b6bb4dc2819ee63b9c76a841607dc"}, {0x98, 0x10d, 0x3, "bea25729865fa46e1f2c32d2889c35cd46d5e6ba047776f0323976b10edaae6bd4fe7dcbc87eed98754857442afa10af5f8cf321c0b7f3f8ad0fc2f839bb66b6ba284dccbbab6a7bd5ea389d72cde0052bb2a10faea5a872c5ea25323890f2b71655ba59883690586860f9b5444ceef020c7b6da20dbe48746fe4e4c8fd20035d88bc2f5ae1f8b9d"}, {0xc0, 0x105, 0x4, "8574a12c0948edc583b4620a3cbf8527930575fb16b94381cd435c87583d45e2b87954dc3fc132db319a4c8104e0a4073a6e34330f5eab8d1e353ed7db50182e5d7eef7ce96089902d57890b8e6ae0c2eba3be839229f83df0ea9eafdb6eddb372fbc9cccbd02d99cd2e7463bf9a105cc0e85a5720de427a3d4c7370aaccf244e96b18c57e1c0ff9fda635fb82b48d024163ab244178113e30617830ca8578dceadb2dddb69843bf45"}, {0x38, 0x88, 0x2, "71e09898edbadf06ad3876e23c9ec9b1e5824264e3563efc3b44ef0957bbd593eef6e23048"}, {0x68, 0x119, 0x3, "ef9f0c04ee677a41c5633bd6f5316cedd3cbb8a3ff5481754f3e4b730b770046d16703fcbde1565233f62e2b237ccf35a7a373999dde63544436787a0a32bfb19f5e3a9974696dc0fdc603cda975eba97aa0c1"}, {0xc0, 0x114, 0x6, "04cc45eea3c1f9411c3997af0fc02f8c02e329ea322e286719357dbd2e3ab2c9936e791189af940c4e49934210a6420844409941dffff891bb76650a3fbeaad6ea93070b552937d69d5a381a194bf83a5a1529869d6daf2d9fa985d259a5b264629239e5d3aa04e86b7821994f10b7d69393187258ab3dfb3d4f91077925588c00b662fa72fe1621579012098d0cdde40269d09c3a81b810aab93cf800b2badf3b903287a1c9a44d044683e2923b4df0"}], 0x488}}, {{&(0x7f0000003940)=@nfc={0x27, 0x1, 0x2, 0x1}, 0x80, &(0x7f0000003800)=[{&(0x7f0000003dc0)="b97dce420aeab6efe16139e44434e402e893f861e19cd79ee966f567df336550b3341eadcc6c08d27292b866e3ab298a9530239b1da2e754ef7339f50972c1842bbde94cbd14b7ecc5159e824b605f7385bebf0c503bca7879", 0x59}, {&(0x7f0000003e40)="4c3d6be7ec40c983322a516b0d153cbd6e1108d15130010c96ece6033b1f72348e6004d936c2b09a48169afaee18f086fbd112975f2e8790a325d9e3d909f0976451dfaaf66c7556fff272e0d8c652d3f52f6bec42c39800dbca4e0449043ee5659d94a91402cead167222ffc2fb391788743f7acc7bd18a1bcc3d3f5d32335614166c943d886fd53bbff85c62f887f88eb276a488013ddf5aed632d2c4ea09e715d0f01c13d64b66d4b4acb772866a0c6a51f0b1499847c7b80cdf38daa121e668698c858269033a6d1a52e5abffae35ec264ae57cbfeda0d25fb215c", 0xdd}, {&(0x7f0000003f40)="72e79a9005d7f686d7f39718c0dd4705adac711605a10c289830202eed0ce70686471e40cad7f1b53a7c5f4648af6f0a50e6da494b418400fcac34832abeb49af70886723e122ec70f64955befe49a12f6ddb336018dd0", 0x57}, {&(0x7f00000040c0)="c79ec734079347f4132fd0f7dd9650d3b1dcc702f422c68cb8f8e07429a491b2bc064f51d8db838a3bb936d605a9a71ed29244e3461de45d2e4f20790c0d6cc1490c92ca078e40bf4addd40595ead51406975486b8d1c3c4440b3dc35ac97aee235bef9bde5aa3939ae21daa9b8cef11c3f7c144c0f94aaf594c515345dedbc5d84b82da23d89eddc6769b26a312885865cf5c5e474da0", 0x97}], 0x4, &(0x7f0000006240)=[{0xa0, 0x29, 0x2, "469bac030f68f5dbad90155a15fe823e5d9df18e9ce783723b7ba106c33959efc3548dcb062b94d4e316134f20019027f02c3a6b4906d4c239d352121b49ad3d174f3eb6378d7d6aef516c047fa716e324984621921ba361ad4b69f7b985cf29daa485b862dff3ebda8db97f848cb466b752f4a66898ed90032ed21a4c2ba32ee0415f3174a539a9f85bcee21e"}, {0xb0, 0x112, 0xffffffe0, "958d220db2b718d47ee8376412d014552406bb38258350035f5256a90b5c953910aff7e0a0451e1d22a26e3a77b2195abbedcefb21416ed48a0e80dda5b6aa77573d150cfbff292596de596d4e1f015b50fec49a46bbf1ab4cde5892f16db0bedec597c20190b45b630cb2d5ccf06a5b50debd13da4685d54e22a7986a32ba087d7987424c23dccffa00905d25e829a8c7ebd13a62bf8f8af9acd71a"}, {0x68, 0x101, 0x7f, "b3d333a22d64f5dfa4f8407608a7207511a2658e597c44fc766726db6d983b977fe0b297f399e8843f010f7a62162e8750f6cf6880001372bed9ae72989c6c3d9a12e73270df453eab326194db12393127397abfe7bda9"}, {0x110, 0x103, 0x2e, "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"}, {0x28, 0x0, 0x2, "f987aa7c2cad676d28e18ea0fc4d6469eabab0b73acc"}, {0x88, 0x29, 0xf6d, "5ae9237f0c3e600b6fb7a418c50058ee2feec3d6c7161e80d4f9a7fd258d2b430ea95c40097dba53b3ed9748f4deb738821108159bf6ba2a414afbb05274d8d230dbb451a985c141c8892dc06836cac5fd3167d7831a8ee28fa2b28275d218705bee1d8c2a37e8c5aa7aee7c16e8304d6c48b033b205d9c0"}, {0x20, 0x109, 0x330379c3, "c05315e0f127089f4fbeb12f"}], 0x398}}, {{&(0x7f0000004240)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000006600)="9a2f2db67aed1e33d7dc755c3d9d28f9b164682a71e77b8ec3ae07048c87e1dfe07b7bdc874720e9895790913d84b5f268731a4ded20746ed3857e206318156745e74dda78813ae4d2a46afa3512ce69544145967d9212373f2f0a09e411f655611a1f25927b4efde2c4f761edc94227f4fd0191dd6792a29c0528f474ccded0628f7c7b54f3ccec8a4920c7c82acfdb17c7ce15f31c23c1d79d3e195b3e5df34c4a1c07e9e2b17b12cc2ac18aa892994d815fb6dd9231f95d8feec536bd550b0feaf0009e7955da401240b88a3ead65bfb6783452a7f62f1fe3b10d8a9fcc58399c7cc8edeb9c3878faeefc3b086c90386efc0a18b8", 0xf6}, {&(0x7f0000006700)="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", 0x1000}], 0x2, &(0x7f00000042c0)=[{0x38, 0x10e, 0x1, "2d4fbd6e69e650c8f7f3fb1cb76f0d82a22655e0a773b2618a8a55953c954bc89cbb74c248"}], 0x38}}, {{0x0, 0x0, &(0x7f0000005ac0)=[{&(0x7f0000004340)="8ed62b496f0ecc864b812d59e290c451755cbe6fcb6c267403a36100820981febd765634e5be11e5b82b3388", 0x2c}, {&(0x7f0000007700)="18cdbb6840cf5d4ce71748f1ca4bc7601dfa58b914392784766802d9ac46a9e031c893f2673e121124bf91a1dcc675dd34fe9262d996d802e4768c82f22a4fb9db112f17d2b6a2b2919373daecced5b1880d5fd10c6b638bd0a2d675346ac120254b9a3938d8d14d6e34c4cc5f48ddff53f7d8000dbb2e5d8b6145b42c3e129e62c86b5580a5bd913f2a8b6f4aa2dfa9724097a25907a592f1a8f9b71766fea37946d1658d8972235a5c1207311b284b9dba9421b51edf8458e6d73ea5a60eec39b42d6e8d0f28987ea8841d59bdec67258f4f960c8eeab8fe429b", 0xdb}], 0x2, &(0x7f0000007800)=[{0xd0, 0x114, 0x1, "a2e66dfa032f9d01267b9587ef39b6703af84ca2f8944dfa1a25fa51b0f2f99b5a5f8278f856bf43d72de1e3c86d82be2898335e8ad44cee819a5e462dfb2f4ff206759d6a9f5ace1b719f1aaef4270683c6d47e618e836fd325ebb8e4fc4e70295ed72d81cde73668c2aedbd7d5a31fc5a57cd9647b8b89aca699cdc6febc3eae56584e67e65e51e16864c37cbc027cbe872bcd322180762f512982410f157905d52e7dd69af03c8715c074674ff38aadeb2121ec0c7cbf49"}], 0xd0}}], 0x4, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) ioctl$KDSETLED(r3, 0x4b32, 0xf1) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="4d9da9fd85b96861b9ac53a626e5702b831ee5ea67a8b0b7746008d5437951fbc918729e72", 0x25}, {&(0x7f0000000080)="91218d0f4574bb633d32779da73025dcca7a00d77faa70ce837f4265172ebecf", 0x20}], 0x2, &(0x7f0000000480)=[{0x38, 0x108, 0xff, "d6a861d65e9abb14571cb4d91753991f3a10fd88086b4a68c3ccb41932daf17f6ec03831379b"}, {0x1010, 0xff, 0x5, "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"}, {0xc0, 0xff, 0x7, "864085f4f799de818a0545b66a102413b83c24ab7286e2e5687abcc9f28f2e823a13e319b68bf630196df61f343c4a6e4dcc4464cce01449689de208e31655749083c77b46442ad53759144cd9c94c043d14532cff0cde834bdec1005711fae28444ba5626d62413865c630b9ef90482363892315ac23d3acc4b8abf4a175009b3537a1d7b11a5344696d03a419cdbefee175c16a0c4c6d97d577e5e3b416917eaccc3c3a928489a2c19dc31193b"}, {0xf8, 0x117, 0x3ff, "59aa20f5d30a2a8925bb14a98345f03cc6ab91e58e96131f409ec77575b8cb32e5793aa2e5e3eefaedf5cfaad2135122781e06a5b255c352372f8dad32fbbec88887d41b547a1d654e0ef27e957bdf52a18fe7dc3e2dc4565a57f91c443abdd7cbde01af84aa2d50300f6732c8ff50d6dcb642e6fc28aca2356b09ab1cc5b960d17b281ac4f7ab19c6dde4a0c760ec1b5f5b1412d622edf1e1c18ec624a35467060fc3399212aa329063ef517bcdcb2bc2cac331ee9e1b235fbd9ee9474d747225d55defedb02cc2487624dd657ef9df848cab9e33082eb6596868550add089f361669a670"}], 0x1200}, 0x20040000) [ 188.460297] ip_tables: iptables: counters copy to user failed while replacing table 19:59:57 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 19:59:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x47f, 0xa0c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) r1 = shmget$private(0x0, 0x1000, 0x7800010c, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000140)=""/128) r2 = socket(0x11, 0x800000003, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x58000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x5, 0x9, 0x9, 0x9, 0x0, 0xe3, 0x5}, &(0x7f0000000080)=0x9c) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x7f, 0x1, 0xa, 0x3}, {0x4, 0x81, 0x8, 0x5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) keyctl$describe(0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 19:59:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff801, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0x6}, 0x20a, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:59:57 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 19:59:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/input/mice\x00', 0x2) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001400)={0x5}, 0x1) r3 = getpid() sched_setattr(r3, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x1, 0x3f, 0x8, 0x0, 0x0, 0x7, 0x21, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x800, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x4000, 0x7, 0xfffffffe, 0x5, 0x40, 0x1f}, r3, 0x3, r4, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xb97) r5 = socket$inet6(0xa, 0x5, 0x0) shutdown(r5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @empty}}, 0x1c) listen(r5, 0x100000000000012) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000180)=0x10) 19:59:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000000600)=[&(0x7f0000000100)={0x5, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xdd4ad65}]) io_destroy(r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=r7, @ANYRES64=0x0, @ANYRES32], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x3c}}, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SIOCX25GFACILITIES(r8, 0x89e2, &(0x7f0000000280)) [ 188.793390] ip_tables: iptables: counters copy to user failed while replacing table 19:59:57 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:57 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 19:59:57 executing program 1: socket$netlink(0x10, 0x3, 0x13) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x1, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf2502000000060006000300000008000100", @ANYRES32=r0, @ANYRESOCT, @ANYRES32=r2, @ANYBLOB="028acc354ebabd2d6a08726a21f8b0a8e0efbf8e143bc04ecd347931c85bafc290ddb25cd566fe8ab3c4ab6c31c2505b506640e9934e16d3b14ad8708f3617bbb70c7ed02c8130e86407f4eebc15aa92fd888d76d75e1d79db6be04aadd11f0e6072d06b591bdc30c7a28ee5239fcf80cf807f583eeaf3774cb45b2439"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x4048815) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000180)=@generic={0x11, "0000150000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b09000000000000001a4ce875f2e340b7679500800010000000000101013c581103b34c0d6327ecce66fd792bbf0e5bf5ff1b0816e3f6db1c00010000000040000049740000000000000002ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="740000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100766c616e000000003400028006000100000000000c000200030000000a0000001c0003800c00010003000000000000800c000100010000000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="23a24d8afb2029a8f93ef869d75c22fd16276a1fe1b68b161d12a33f8d9133768276e500fa4ede7f1a75857bf6f184b7a539fb4bcf6f0e655977f1b453a335a1e50902a74d46274948ecb88096a699d5ae4e32e2bc6a71c904f7c7fd16cb014db8f7c1432d6d1af4b470412295fa8ddf6323774fbcfe08d3f630"], 0x74}, 0x1, 0x0, 0x0, 0x14000}, 0x8000) 19:59:57 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 189.044735] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.083420] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 19:59:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x161, 0x0) r0 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="c7300000000000000000080000000400048018f76f53be0e4a6c8c67d1a9b968c141a692cf21f9872967ca96e5197f9b46aba6c33814399958ce964111a3ed9c6b16fb9065cf0144eff5fd787fd3f37854251d304ad087d8af6675049b7ad131be22880600000000000000950ffc25bcdccb4cccbf8f297775282b4b1ae7bbe43c5a9921c47b46035fc4b495a239eeea3e0044a4fb"], 0x18}, 0x1, 0xf618000000000000}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000180)) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080), 0x4) mount$9p_tcp(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB]) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6275732c776f0300000000000000666c65312c75707064726469723d2e2f66696c652000"]) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={0x0}}, 0xc010) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040)=0x7fffffff, 0x4) 19:59:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:58 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 19:59:58 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000001c0)={{0xdd, 0x7f}, 'port0\x00', 0x20, 0x400, 0x0, 0x1, 0xe3c5, 0xfd, 0x4, 0x0, 0xe, 0x7}) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3fffffc, 0x2, &(0x7f00000000c0)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000040000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a02", 0x7c}, {0x0}], 0x0, 0x0) 19:59:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xdc0be3328e64f35a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0x4f, 0x7f}) fdatasync(r1) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) open_by_handle_at(r0, &(0x7f0000000000)={0x5e, 0x3, "06d58959b87593f6c90c1acb484a48af3f61d19742f64d610796e35950d1e0c4ede3e37b31662a55af29d5b25ebf9402279a3f7ebf0809aa10a16f9a3c322a8e6fb513600e8a2c31debf77afd61a676a18e90967675c"}, 0x100) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0xd, 0xa, 0x201}, 0x14}}, 0x0) 19:59:58 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000140)='\x00\x04\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4660dad81fa79cd6e10bce27b90300060000000000000000b738000000570035f4c38422a3bc8220000506"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) ioctl$RTC_PIE_ON(r1, 0x7005) 19:59:58 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) [ 189.323598] ubi0: attaching mtd0 19:59:58 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0xd7}, 0x8808, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) shutdown(r1, 0x1) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000000)=0x80000000002, 0xe3) recvmmsg(r1, &(0x7f00000001c0), 0x460, 0xea225aec34b1dd0e, 0x0) [ 189.394786] ubi0: scanning is finished 19:59:58 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) [ 189.460465] overlayfs: unrecognized mount option "wo" or missing value 19:59:58 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000000010044) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = getpid() sched_setattr(r2, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r3 = getpid() getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000340)=""/200, &(0x7f0000000180)=0xc8) sched_setattr(r3, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r4 = gettid() sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@RTM_GETNSID={0x5c, 0x5a, 0xf246cf0cf0d61de, 0x70bd2b, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r2}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r4}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x5000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x40001, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) [ 189.542884] XFS (loop2): Mounting V4 Filesystem [ 189.557636] overlayfs: unrecognized mount option "wo" or missing value [ 189.570815] attempt to access beyond end of device 19:59:58 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 19:59:58 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xdc0be3328e64f35a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0x4f, 0x7f}) fdatasync(r1) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) open_by_handle_at(r0, &(0x7f0000000000)={0x5e, 0x3, "06d58959b87593f6c90c1acb484a48af3f61d19742f64d610796e35950d1e0c4ede3e37b31662a55af29d5b25ebf9402279a3f7ebf0809aa10a16f9a3c322a8e6fb513600e8a2c31debf77afd61a676a18e90967675c"}, 0x100) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0xd, 0xa, 0x201}, 0x14}}, 0x0) [ 189.588650] loop2: rw=4096, want=131073, limit=131071 19:59:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xdc0be3328e64f35a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, &(0x7f0000000280), 0x1033b) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000100)={0x4f, 0x7f}) fdatasync(r1) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) open_by_handle_at(r0, &(0x7f0000000000)={0x5e, 0x3, "06d58959b87593f6c90c1acb484a48af3f61d19742f64d610796e35950d1e0c4ede3e37b31662a55af29d5b25ebf9402279a3f7ebf0809aa10a16f9a3c322a8e6fb513600e8a2c31debf77afd61a676a18e90967675c"}, 0x100) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0xd, 0xa, 0x201}, 0x14}}, 0x0) [ 189.638085] XFS (loop2): metadata I/O error: block 0x20000 ("xlog_bread_noalign") error 5 numblks 1 [ 189.669501] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 189.685822] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 189.695692] XFS (loop2): empty log check failed [ 189.734006] XFS (loop2): log mount/recovery failed: error -5 [ 189.741286] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 189.764981] XFS (loop2): log mount failed [ 189.773812] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 189.800902] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 189.820074] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 189.843324] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 19:59:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:58 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) [ 189.881186] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 189.892579] ubi0: background thread "ubi_bgt0d" started, PID 8353 [ 189.899653] ubi: mtd0 is already attached to ubi0 [ 189.905598] ubi: mtd0 is already attached to ubi0 [ 189.964988] ubi0: detaching mtd0 [ 190.005510] ubi0: mtd0 is detached 19:59:58 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, 0x4, {0x9}}, 0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f00000000c0)) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) openat$null(0xffffffffffffff9c, 0x0, 0x70142, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x4f}, {0x80, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0xa, @in=@empty}}, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000100)=0x7fffffff) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r1, 0x48280) perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x81, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x24a01, 0x0) ioctl$PIO_FONT(r2, 0x4b61, 0x0) 19:59:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x6, 0x0, 0xd7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8020003) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000180), 0x4) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r0, 0x8200) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0xa) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2e}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f00000001c0)=0x10) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x100) syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x12c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xedab}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd0}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2f0200}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 19:59:58 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 19:59:58 executing program 3: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000080)=0x200) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) 19:59:58 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:59 executing program 4: getpid() openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 190.216816] audit: type=1804 audit(1592683199.110:15): pid=8401 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir136702308/syzkaller.hq3Ydk/16/file0/bus" dev="sda1" ino=15864 res=1 19:59:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 190.354628] audit: type=1804 audit(1592683199.250:16): pid=8401 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir136702308/syzkaller.hq3Ydk/16/file0/bus" dev="sda1" ino=15864 res=1 19:59:59 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 19:59:59 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="ae51e103", @ANYRES16=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x2000c015}, 0x4) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="75707065726467033d2e3d2e2f66696c65000000000000000800a4cf08d2bb1dcb7f9a00000000000000005ac9c5e9a43e94c4eb3306569bacaa1c2942f9d14f1beae8"]) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0xa7}], 0x1}, 0x2) syz_genetlink_get_family_id$tipc(0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYBLOB="08062bbd700470dbdf2501000000f39fcfb7000000000b000000000c001473797a300000000009cbf4b92567d5f28bc0d56d39d9"], 0x28}, 0x1, 0x0, 0x0, 0x40040001}, 0x4040) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c001}, 0x20080) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40040c4) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x800) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 19:59:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 19:59:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 190.623158] overlayfs: unrecognized mount option "upperdg=.=./file" or missing value 19:59:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 190.732249] overlayfs: unrecognized mount option "upperdg=.=./file" or missing value 19:59:59 executing program 3: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000340)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000080)=0x200) recvmsg(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffefb, &(0x7f000000b600)=[{&(0x7f0000002e80)=""/167, 0x7a10}], 0x1}, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10, r3, 0x0) 19:59:59 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000000140)='/', 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d07, &(0x7f0000000040)) sendfile(r0, r0, &(0x7f0000001000), 0xfec) write$P9_RRENAMEAT(r0, &(0x7f0000000180)={0xfffffffffffffe16}, 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) rmdir(&(0x7f00000001c0)='./file0/file0/file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 19:59:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 19:59:59 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 19:59:59 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:59 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 19:59:59 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:00 executing program 2: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x20000) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000080)) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @raw_data=[0x3, 0x9, 0xfff, 0x402, 0x39, 0x8, 0x2, 0x479a, 0x2, 0x20001c, 0x458, 0x5, 0x7a, 0x3f, 0x81, 0x20, 0x10, 0x3, 0xd, 0x6, 0x6, 0x9, 0x4, 0x9, 0x80005, 0x8, 0x100, 0x5, 0x10001, 0x2, 0x9, 0x2c0c138a]}) 20:00:00 executing program 1: prctl$PR_SET_SECUREBITS(0x1c, 0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x682380, 0x157) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4800, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="140000003584cc2b4e061b901260dab28ede5f07010007002a23402d5b252c01000000"], 0x14) 20:00:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='/dev/kvm\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = dup3(r0, r1, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0xc0010141}]}) dup2(r4, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) 20:00:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:00 executing program 1: read(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400503, 0x0) poll(&(0x7f00000001c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xa3, 0x20, 0x9, 0x6, 0x9}) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) fallocate(r1, 0x10, 0x0, 0x8020001) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x6) 20:00:00 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:00 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000)) r1 = open(&(0x7f0000000180)='./bus\x00', 0x1bb842, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x4000000000010046) 20:00:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x6, 0x2, 0xfc, 0x3, 0x0, 0x2, 0x20, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x911, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x14004, 0x100, 0x1ff, 0x0, 0x2, 0xd386, 0x7c}, 0x0, 0x9, r1, 0x5e61098fe2fc2bf8) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=0x0, @ANYBLOB="000431f1000000000000000000000500220000000000050007000300000006001d0000000047142bc3d09271f8382bb1a634be00"], 0x2c}}, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f776572646901800000006469723d2e2f66696c65315edc137d5aa1923651880c9528c995a6fe648d1f99a6aaa94295c30c13a4027b447f7b635a3c2feb84e9472362925ad3f7e464bc576fc0034166b2e921c6c658d13a73f95e2acf694119d217c91754cbf7e06a72eac79fc5562ce58b32ec61da7d0e23c2893057b0c2e20c67e36f9b00b77a6f5a184b311eeef2b5c3798c5832ad9a196f8e8d122ebe52ca64c1944b381a8776bdcf36375371b1b062f4e905f830e6df1b3d52ff3f8bbd33fa4293c2f3b592000000000000000000"]) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000280)='./file0/f.le.\x00', 0x0) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') 20:00:00 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:01 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 20:00:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 192.171151] overlayfs: unrecognized mount option "lowerdi€" or missing value 20:00:01 executing program 1: read(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400503, 0x0) poll(&(0x7f00000001c0), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0xa3, 0x20, 0x9, 0x6, 0x9}) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) fallocate(r1, 0x10, 0x0, 0x8020001) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x6) 20:00:01 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 20:00:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) 20:00:01 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:01 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 192.314331] overlayfs: unrecognized mount option "lowerdi€" or missing value 20:00:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0xf9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$P9_RWSTAT(r5, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) 20:00:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) 20:00:01 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 20:00:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005080800418e00000004fcff", 0x58}], 0x1) 20:00:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) 20:00:01 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:01 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:01 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141242, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="600000e002e00800000cda492c0f12c96824", 0x12, 0x400}, {0x0, 0x0, 0xfffffffffffffe01}], 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000060000080000000000000a1c19ba377403afbeb2170c3a0d52ca2d38c0900000000000003"]) 20:00:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@ipv6_deladdr={0x54, 0x15, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa, 0x18, 0x1, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @private1}, @IFA_CACHEINFO={0x14, 0x6, {0x652, 0x2, 0x5, 0xff}}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x54}}, 0x0) 20:00:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r1, 0x0) 20:00:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r1, 0x0) 20:00:01 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3200, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) dup(r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) mremap(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f000048c000/0x1000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x183cc0, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r5, 0x40044145, &(0x7f0000000480)=0x2) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) mmap$usbmon(&(0x7f0000115000/0x2000)=nil, 0x2000, 0x4, 0x8010, r2, 0x4) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x4) 20:00:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x204180, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1ff}, 0x0, &(0x7f00000000c0)={0xffc}, 0x0, 0x0) 20:00:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r1, 0x0) [ 192.953376] ubi0: attaching mtd0 20:00:01 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:01 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 192.983761] ubi0: scanning is finished 20:00:01 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:02 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 193.332121] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 193.378257] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 193.378266] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 193.378273] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 193.378279] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 193.378286] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 193.378294] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 193.378301] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 193.378474] ubi0: background thread "ubi_bgt0d" started, PID 8643 [ 193.379375] ubi0: detaching mtd0 [ 193.380997] ubi0: mtd0 is detached [ 194.547866] MINIX-fs: bad superblock or unable to read bitmaps 20:00:03 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x6e3}, 0x0) r0 = getpid() ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000100)={{0x20, 0x2}, {0x7, 0x3f}, 0x3, 0x2, 0x1}) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0xb0}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="22000000030000000000000000000000000000000000000001000000000000002300"], 0x22) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x4}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x8eb46, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) r5 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x8001) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x28, 0x2, @thr={&(0x7f00000002c0)="c5c1ef9e7be2510c4620870ccd0c1ba63025027f4567a49ef405641b7d28b8e0a309f71efde431302195a8ee76ad2852b97bf546e4a65bc09476424fcc02e5e9481a4f28271d6c8a181bd2df53851a97c0076cda809d702ad8b17240ed66fdf1713f", &(0x7f00000003c0)="c3222b76564dbed8a765990c2169dd6b47e8a4e47a48441555c5c7560d11f9927e9ce44fb860a8a3a8e8c4928a1236f71825b98965c15235bae17a0e1cdfba48a6f7afbe8dca767ee818da6cb47539008cbd491e3a3be0ea624dcacd71aa979d1c19d3ed3305b8bef6fa74c0f2e62beb8fa5d55926966f8e8e89c7f2dff9df7da5b2c4d51101cc614c18ab718114a338673c705d8e5e7b7270532c80c5197c5eb3f9e40950cf44333d087fc74a95da86f554039010b7021266a1b3a8bbfd850177bbba7f4ab83d5215b103a8a6dd3f182590fca139a2f46a4c8a69ff1415d6495443b7"}}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000380)=0x8) 20:00:03 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 20:00:03 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:03 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 20:00:03 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0fa2"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x100000, 0x2000, &(0x7f000000b000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:00:03 executing program 4 (fault-call:4 fault-nth:0): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:03 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000500)="001c6b0cf478189858438f69e221d37ae7d0ec7c94357c3354b7c51464250ac28f5b6c6eb6fb6e319474d5fe51e1ad7fce51d13767d33e1f8674e9782cf8d17b1323edbbb2f84e643baf8f3004fc0e2afd43c07b2c15a1f8c5331eeac4808dbbe83592ab979a9b29836ef6cbe1aea465582dc5ac74074adbc071d43c69600dd2808c54192d87db32a04efe1d3114ab782e6b3e21c98ad24760b5b7cc2709b3e000f153a3fb10de6eec058a7b7c6925cb6f843b432f7c342508f28b80dcbf13d6baa47cf8b2f0411ffafa4e0b28df978d1eb3659ac9b1743c3fe21a4f96cb69bc0020e081e6afd535b3bfae108015079f99e2", 0xf2, 0x3}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x400080, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000003c0)={0x0, 0x1}) shmat(0x0, &(0x7f0000007000/0x4000)=nil, 0x4000) delete_module(&(0x7f0000000100)='/dev/nullb0\x00', 0xa00) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x1}, 0x2) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x814) 20:00:03 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 194.779423] FAULT_INJECTION: forcing a failure. [ 194.779423] name fail_page_alloc, interval 1, probability 0, space 0, times 1 20:00:03 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) times(&(0x7f0000000080)) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') timer_create(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) 20:00:03 executing program 4 (fault-call:4 fault-nth:1): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 194.793222] CPU: 0 PID: 8707 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 20:00:03 executing program 4 (fault-call:4 fault-nth:2): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:03 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 194.793229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.793232] Call Trace: [ 194.793247] dump_stack+0x1b2/0x283 [ 194.793261] should_fail.cold+0x10a/0x154 [ 194.793277] __alloc_pages_nodemask+0x22b/0x2730 [ 194.793288] ? kasan_slab_free+0xaf/0x190 20:00:03 executing program 4 (fault-call:4 fault-nth:3): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:03 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:04 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000500)="001c6b0cf478189858438f69e221d37ae7d0ec7c94357c3354b7c51464250ac28f5b6c6eb6fb6e319474d5fe51e1ad7fce51d13767d33e1f8674e9782cf8d17b1323edbbb2f84e643baf8f3004fc0e2afd43c07b2c15a1f8c5331eeac4808dbbe83592ab979a9b29836ef6cbe1aea465582dc5ac74074adbc071d43c69600dd2808c54192d87db32a04efe1d3114ab782e6b3e21c98ad24760b5b7cc2709b3e000f153a3fb10de6eec058a7b7c6925cb6f843b432f7c342508f28b80dcbf13d6baa47cf8b2f0411ffafa4e0b28df978d1eb3659ac9b1743c3fe21a4f96cb69bc0020e081e6afd535b3bfae108015079f99e2", 0xf2, 0x3}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x400080, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000003c0)={0x0, 0x1}) shmat(0x0, &(0x7f0000007000/0x4000)=nil, 0x4000) delete_module(&(0x7f0000000100)='/dev/nullb0\x00', 0xa00) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x1}, 0x2) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x814) [ 194.793299] ? free_pgd_range+0x87a/0xd10 [ 194.793314] ? free_pgtables+0x1ec/0x2b0 [ 194.793324] ? unmap_region+0x246/0x320 [ 194.793334] ? do_munmap+0x4fd/0xc40 [ 194.793342] ? mmap_region+0x16e/0x1060 [ 194.793352] ? SyS_mmap_pgoff+0x249/0x510 [ 194.793362] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 194.793372] ? debug_check_no_obj_freed+0x27c/0x5fd [ 194.793384] ? lock_acquire+0x170/0x3f0 [ 194.793394] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 194.793410] ? debug_check_no_obj_freed+0x27c/0x5fd [ 194.793431] alloc_pages_current+0xe7/0x1e0 [ 194.793440] ? ___pte_free_tlb+0x44/0xc0 [ 194.793450] __get_free_pages+0xb/0x40 [ 194.793459] tlb_remove_table+0x108/0x1e0 [ 194.793469] free_pgd_range+0x87a/0xd10 [ 194.793491] free_pgtables+0x1ec/0x2b0 [ 194.793504] unmap_region+0x246/0x320 [ 194.793516] ? anon_vma_compatible+0x290/0x290 [ 194.793528] ? inode_has_perm.isra.0+0x153/0x1d0 [ 194.793542] ? __vma_rb_erase+0x3f9/0xa00 [ 194.793550] ? userfaultfd_unmap_prep+0x2ed/0x450 [ 194.793559] ? vma_compute_subtree_gap+0x18b/0x1f0 [ 194.793569] do_munmap+0x4fd/0xc40 [ 194.793581] mmap_region+0x16e/0x1060 [ 194.793595] do_mmap+0x5b3/0xcb0 [ 194.793608] vm_mmap_pgoff+0x14e/0x1a0 [ 194.793622] ? vma_is_stack_for_current+0xb0/0xb0 [ 194.793632] ? __fget+0x226/0x360 [ 194.793645] SyS_mmap_pgoff+0x249/0x510 [ 194.793656] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 194.793664] ? SyS_clock_settime+0x1a0/0x1a0 [ 194.793673] ? do_syscall_64+0x4c/0x640 [ 194.793681] ? align_vdso_addr+0x60/0x60 [ 194.793691] do_syscall_64+0x1d5/0x640 [ 194.793704] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 194.793711] RIP: 0033:0x45ca59 [ 194.793716] RSP: 002b:00007f2358635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 194.793725] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 194.793730] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 194.793735] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 [ 194.793741] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 194.793746] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f23586366d4 [ 194.944198] FAULT_INJECTION: forcing a failure. [ 194.944198] name failslab, interval 1, probability 0, space 0, times 1 [ 194.944215] CPU: 1 PID: 8718 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 194.944222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.944226] Call Trace: [ 194.944244] dump_stack+0x1b2/0x283 [ 194.944262] should_fail.cold+0x10a/0x154 [ 194.944280] should_failslab+0xd6/0x130 [ 194.944292] kmem_cache_alloc+0x28e/0x3c0 [ 194.944305] mmap_region+0x613/0x1060 [ 194.944322] do_mmap+0x5b3/0xcb0 [ 194.944339] vm_mmap_pgoff+0x14e/0x1a0 [ 194.944357] ? vma_is_stack_for_current+0xb0/0xb0 [ 194.944369] ? __fget+0x226/0x360 [ 194.944386] SyS_mmap_pgoff+0x249/0x510 [ 194.944401] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 194.944410] ? SyS_clock_settime+0x1a0/0x1a0 [ 194.944421] ? do_syscall_64+0x4c/0x640 [ 194.944431] ? align_vdso_addr+0x60/0x60 [ 194.944444] do_syscall_64+0x1d5/0x640 [ 194.944461] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 194.944469] RIP: 0033:0x45ca59 [ 194.944475] RSP: 002b:00007f2358635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 194.944486] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 194.944492] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 194.944498] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 [ 194.944504] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 194.944510] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f23586366d4 [ 195.024266] FAULT_INJECTION: forcing a failure. [ 195.024266] name failslab, interval 1, probability 0, space 0, times 0 [ 195.024278] CPU: 0 PID: 8725 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 195.024283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.024286] Call Trace: [ 195.024301] dump_stack+0x1b2/0x283 [ 195.024317] should_fail.cold+0x10a/0x154 [ 195.024335] should_failslab+0xd6/0x130 [ 195.024345] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 195.024358] usbdev_mmap+0x132/0x6c0 [ 195.024367] ? mmap_region+0x613/0x1060 [ 195.024381] ? usbdev_open+0x780/0x780 [ 195.024392] ? rcu_read_lock_sched_held+0x10a/0x130 [ 195.024401] ? kmem_cache_alloc+0x35f/0x3c0 [ 195.024417] mmap_region+0x8a8/0x1060 [ 195.024433] do_mmap+0x5b3/0xcb0 [ 195.024450] vm_mmap_pgoff+0x14e/0x1a0 [ 195.024465] ? vma_is_stack_for_current+0xb0/0xb0 [ 195.024477] ? __fget+0x226/0x360 [ 195.024492] SyS_mmap_pgoff+0x249/0x510 [ 195.024504] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 195.024513] ? SyS_clock_settime+0x1a0/0x1a0 [ 195.024523] ? do_syscall_64+0x4c/0x640 [ 195.024532] ? align_vdso_addr+0x60/0x60 [ 195.024543] do_syscall_64+0x1d5/0x640 [ 195.024559] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 195.024567] RIP: 0033:0x45ca59 [ 195.024573] RSP: 002b:00007f2358635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 195.024582] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 195.024587] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 195.024592] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 [ 195.024598] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 195.024603] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f23586366d4 [ 195.085847] FAULT_INJECTION: forcing a failure. [ 195.085847] name failslab, interval 1, probability 0, space 0, times 0 [ 195.085860] CPU: 0 PID: 8731 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 195.085866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.085870] Call Trace: [ 195.085891] dump_stack+0x1b2/0x283 [ 195.085908] should_fail.cold+0x10a/0x154 [ 195.085928] should_failslab+0xd6/0x130 [ 195.085939] __kmalloc+0x2c1/0x400 [ 195.085951] ? hcd_buffer_alloc+0x2ba/0x3f0 [ 195.085964] hcd_buffer_alloc+0x2ba/0x3f0 [ 195.085976] ? hcd_buffer_destroy+0x90/0x90 [ 195.085991] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 195.086005] usb_alloc_coherent+0x5d/0x80 [ 195.086018] usbdev_mmap+0x178/0x6c0 [ 195.086028] ? mmap_region+0x613/0x1060 [ 195.086036] ? usbdev_open+0x780/0x780 [ 195.086045] ? rcu_read_lock_sched_held+0x10a/0x130 [ 195.086054] ? kmem_cache_alloc+0x35f/0x3c0 [ 195.086065] mmap_region+0x8a8/0x1060 [ 195.086081] do_mmap+0x5b3/0xcb0 [ 195.086097] vm_mmap_pgoff+0x14e/0x1a0 [ 195.086111] ? vma_is_stack_for_current+0xb0/0xb0 [ 195.086123] ? __fget+0x226/0x360 [ 195.086138] SyS_mmap_pgoff+0x249/0x510 [ 195.086150] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 195.086159] ? SyS_clock_settime+0x1a0/0x1a0 [ 195.086170] ? do_syscall_64+0x4c/0x640 [ 195.086179] ? align_vdso_addr+0x60/0x60 [ 195.086190] do_syscall_64+0x1d5/0x640 [ 195.086206] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 195.086214] RIP: 0033:0x45ca59 [ 195.086219] RSP: 002b:00007f2358635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 195.086229] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 195.086235] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 195.086240] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 [ 195.086245] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 195.086250] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f23586366d4 20:00:04 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:04 executing program 4 (fault-call:4 fault-nth:4): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:04 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:04 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000500)="001c6b0cf478189858438f69e221d37ae7d0ec7c94357c3354b7c51464250ac28f5b6c6eb6fb6e319474d5fe51e1ad7fce51d13767d33e1f8674e9782cf8d17b1323edbbb2f84e643baf8f3004fc0e2afd43c07b2c15a1f8c5331eeac4808dbbe83592ab979a9b29836ef6cbe1aea465582dc5ac74074adbc071d43c69600dd2808c54192d87db32a04efe1d3114ab782e6b3e21c98ad24760b5b7cc2709b3e000f153a3fb10de6eec058a7b7c6925cb6f843b432f7c342508f28b80dcbf13d6baa47cf8b2f0411ffafa4e0b28df978d1eb3659ac9b1743c3fe21a4f96cb69bc0020e081e6afd535b3bfae108015079f99e2", 0xf2, 0x3}]) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x400080, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000003c0)={0x0, 0x1}) shmat(0x0, &(0x7f0000007000/0x4000)=nil, 0x4000) delete_module(&(0x7f0000000100)='/dev/nullb0\x00', 0xa00) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000280)={0x1}, 0x2) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x814) 20:00:04 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="a1023aa6bc435b19ae7f9328373a8ab40a83875a473776b84d7953a3dc478bea96ca8b94d837e7a6bb0fbf09d3d48399911492a36f9609fc2beeee47e853f70bed6ca2bf12b5b8939f584d8e6e49678fe100e255685afe488feb876b0e4cf2a2b070acb9ea32ccc9a3731e37a86a29529bc64ac1f31f6c1fe6ece741c903072f18738f867c3cbc9fe288576a618594b7f88d142e9e40e855a7b76cb8df7c84e1e18d993307ca41b70101000000000000b153cdb180b96e22d6434ba1d4c6", @ANYRES16=r3, @ANYBLOB="95c00000000000000000010001590000000007410000004c00180000000075647000"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c001}, 0x20080) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x30044000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/232, 0xe8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r8, &(0x7f00000017c0), 0x375, 0x0) [ 195.096568] audit: type=1400 audit(1592683204.000:17): avc: denied { write } for pid=8715 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 [ 195.274878] IPVS: ftp: loaded support on port[0] = 21 [ 195.981062] FAULT_INJECTION: forcing a failure. [ 195.981062] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.020388] CPU: 0 PID: 8766 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 196.028218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.037586] Call Trace: [ 196.040184] dump_stack+0x1b2/0x283 [ 196.043824] should_fail.cold+0x10a/0x154 [ 196.048113] __alloc_pages_nodemask+0x22b/0x2730 [ 196.052885] ? find_next_iomem_res+0x215/0x3f0 [ 196.057481] ? pagerange_is_ram_callback+0xbf/0x100 [ 196.062510] ? pat_enabled+0x10/0x10 [ 196.066234] ? walk_system_ram_range+0x127/0x160 [ 196.071010] ? walk_system_ram_res+0x110/0x110 [ 196.075610] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 196.080556] ? __init_cache_modes+0x1f0/0x1f0 [ 196.085069] ? lookup_memtype+0x49/0x180 [ 196.089175] ? reserve_pfn_range+0xb9/0x380 [ 196.093527] alloc_pages_current+0xe7/0x1e0 [ 196.098041] pte_alloc_one+0x15/0x100 [ 196.101852] __pte_alloc+0x21/0x280 [ 196.105489] remap_pfn_range+0x9f7/0xc90 [ 196.109608] ? usbdev_mmap+0x19d/0x6c0 [ 196.113511] ? __pmd_alloc+0x3a0/0x3a0 [ 196.117417] usbdev_mmap+0x357/0x6c0 [ 196.121192] ? mmap_region+0x613/0x1060 [ 196.125176] ? usbdev_open+0x780/0x780 [ 196.129072] ? rcu_read_lock_sched_held+0x10a/0x130 [ 196.134103] ? kmem_cache_alloc+0x35f/0x3c0 [ 196.138439] mmap_region+0x8a8/0x1060 [ 196.142256] do_mmap+0x5b3/0xcb0 [ 196.145630] vm_mmap_pgoff+0x14e/0x1a0 [ 196.149530] ? vma_is_stack_for_current+0xb0/0xb0 [ 196.154380] ? __fget+0x226/0x360 [ 196.157870] SyS_mmap_pgoff+0x249/0x510 [ 196.161854] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 196.166785] ? SyS_clock_settime+0x1a0/0x1a0 [ 196.171199] ? do_syscall_64+0x4c/0x640 [ 196.175182] ? align_vdso_addr+0x60/0x60 [ 196.179245] do_syscall_64+0x1d5/0x640 [ 196.183126] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 196.188297] RIP: 0033:0x45ca59 [ 196.191488] RSP: 002b:00007f2358635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 196.199186] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 196.206445] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 196.213840] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 [ 196.221099] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 20:00:05 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) times(&(0x7f0000000080)) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') timer_create(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) 20:00:05 executing program 0: getpid() r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 196.228363] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f23586366d4 20:00:05 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:05 executing program 4 (fault-call:4 fault-nth:5): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:05 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:05 executing program 4 (fault-call:4 fault-nth:6): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:05 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 196.619850] FAULT_INJECTION: forcing a failure. [ 196.619850] name failslab, interval 1, probability 0, space 0, times 0 [ 196.619864] CPU: 0 PID: 8805 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 196.619870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.619873] Call Trace: [ 196.619891] dump_stack+0x1b2/0x283 [ 196.619913] should_fail.cold+0x10a/0x154 [ 196.619929] should_failslab+0xd6/0x130 [ 196.619941] kmem_cache_alloc+0x28e/0x3c0 [ 196.619955] ptlock_alloc+0x1d/0x70 [ 196.619966] pte_alloc_one+0x57/0x100 [ 196.619976] __pte_alloc+0x21/0x280 [ 196.619987] remap_pfn_range+0x9f7/0xc90 [ 196.620008] ? hcd_buffer_destroy+0x90/0x90 [ 196.620022] ? __pmd_alloc+0x3a0/0x3a0 [ 196.620036] usbdev_mmap+0x357/0x6c0 [ 196.620045] ? mmap_region+0x613/0x1060 [ 196.620054] ? usbdev_open+0x780/0x780 [ 196.620065] ? rcu_read_lock_sched_held+0x10a/0x130 [ 196.620074] ? kmem_cache_alloc+0x35f/0x3c0 [ 196.620084] mmap_region+0x8a8/0x1060 [ 196.620101] do_mmap+0x5b3/0xcb0 [ 196.620116] vm_mmap_pgoff+0x14e/0x1a0 [ 196.620132] ? vma_is_stack_for_current+0xb0/0xb0 [ 196.620144] ? __fget+0x226/0x360 [ 196.620164] SyS_mmap_pgoff+0x249/0x510 [ 196.620178] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 196.620188] ? SyS_clock_settime+0x1a0/0x1a0 [ 196.620200] ? do_syscall_64+0x4c/0x640 [ 196.620210] ? align_vdso_addr+0x60/0x60 [ 196.620222] do_syscall_64+0x1d5/0x640 [ 196.620238] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 196.620246] RIP: 0033:0x45ca59 [ 196.620252] RSP: 002b:00007f2358635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 196.620283] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 196.620290] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 196.620296] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 [ 196.620302] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 196.620308] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f23586366d4 [ 196.720527] FAULT_INJECTION: forcing a failure. [ 196.720527] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.720539] CPU: 0 PID: 8813 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 196.720545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.720549] Call Trace: [ 196.720566] dump_stack+0x1b2/0x283 [ 196.720588] should_fail.cold+0x10a/0x154 [ 196.720605] __alloc_pages_nodemask+0x22b/0x2730 [ 196.720623] ? pat_enabled+0x10/0x10 [ 196.720639] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 196.720649] ? trace_hardirqs_on+0x10/0x10 [ 196.720657] ? lock_acquire+0x170/0x3f0 [ 196.720666] ? lock_downgrade+0x6e0/0x6e0 [ 196.720682] ? __pte_alloc+0x198/0x280 [ 196.720693] ? remap_pfn_range+0x8ae/0xc90 [ 196.720707] alloc_pages_current+0xe7/0x1e0 [ 196.720719] pte_alloc_one+0x15/0x100 [ 196.720728] __pte_alloc+0x21/0x280 [ 196.720739] remap_pfn_range+0x9f7/0xc90 [ 196.720763] ? __pmd_alloc+0x3a0/0x3a0 [ 196.720778] usbdev_mmap+0x357/0x6c0 [ 196.720786] ? mmap_region+0x613/0x1060 [ 196.720795] ? usbdev_open+0x780/0x780 [ 196.720807] ? rcu_read_lock_sched_held+0x10a/0x130 [ 196.720815] ? kmem_cache_alloc+0x35f/0x3c0 [ 196.720823] mmap_region+0x8a8/0x1060 [ 196.720836] do_mmap+0x5b3/0xcb0 [ 196.720850] vm_mmap_pgoff+0x14e/0x1a0 [ 196.720864] ? vma_is_stack_for_current+0xb0/0xb0 [ 196.720875] ? __fget+0x226/0x360 [ 196.720889] SyS_mmap_pgoff+0x249/0x510 [ 196.720901] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 196.720909] ? SyS_clock_settime+0x1a0/0x1a0 [ 196.720919] ? do_syscall_64+0x4c/0x640 [ 196.720927] ? align_vdso_addr+0x60/0x60 [ 196.720937] do_syscall_64+0x1d5/0x640 [ 196.720953] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 196.720961] RIP: 0033:0x45ca59 [ 196.720967] RSP: 002b:00007f2358635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 196.720977] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 196.720982] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 196.720987] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 [ 196.720992] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 196.720997] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f23586366d4 20:00:06 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:06 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:06 executing program 4 (fault-call:4 fault-nth:7): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:06 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="a1023aa6bc435b19ae7f9328373a8ab40a83875a473776b84d7953a3dc478bea96ca8b94d837e7a6bb0fbf09d3d48399911492a36f9609fc2beeee47e853f70bed6ca2bf12b5b8939f584d8e6e49678fe100e255685afe488feb876b0e4cf2a2b070acb9ea32ccc9a3731e37a86a29529bc64ac1f31f6c1fe6ece741c903072f18738f867c3cbc9fe288576a618594b7f88d142e9e40e855a7b76cb8df7c84e1e18d993307ca41b70101000000000000b153cdb180b96e22d6434ba1d4c6", @ANYRES16=r3, @ANYBLOB="95c00000000000000000010001590000000007410000004c00180000000075647000"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c001}, 0x20080) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x30044000) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/232, 0xe8}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r8, &(0x7f00000017c0), 0x375, 0x0) 20:00:06 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) times(&(0x7f0000000080)) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') timer_create(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) 20:00:06 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 197.244512] FAULT_INJECTION: forcing a failure. [ 197.244512] name failslab, interval 1, probability 0, space 0, times 0 20:00:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:06 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 197.304759] CPU: 0 PID: 8832 Comm: syz-executor.4 Not tainted 4.14.184-syzkaller #0 [ 197.312605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.322997] Call Trace: [ 197.323023] dump_stack+0x1b2/0x283 20:00:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 197.323040] should_fail.cold+0x10a/0x154 [ 197.323057] should_failslab+0xd6/0x130 [ 197.323068] kmem_cache_alloc+0x28e/0x3c0 [ 197.323083] ptlock_alloc+0x1d/0x70 [ 197.323095] pte_alloc_one+0x57/0x100 20:00:06 executing program 4 (fault-call:4 fault-nth:8): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 197.323104] __pte_alloc+0x21/0x280 [ 197.323116] remap_pfn_range+0x9f7/0xc90 20:00:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 197.323148] ? __pmd_alloc+0x3a0/0x3a0 [ 197.323164] usbdev_mmap+0x357/0x6c0 [ 197.323175] ? mmap_region+0x613/0x1060 [ 197.323184] ? usbdev_open+0x780/0x780 20:00:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 197.323195] ? rcu_read_lock_sched_held+0x10a/0x130 [ 197.323203] ? kmem_cache_alloc+0x35f/0x3c0 [ 197.323214] mmap_region+0x8a8/0x1060 [ 197.323230] do_mmap+0x5b3/0xcb0 [ 197.323246] vm_mmap_pgoff+0x14e/0x1a0 [ 197.323262] ? vma_is_stack_for_current+0xb0/0xb0 [ 197.323273] ? __fget+0x226/0x360 [ 197.323303] SyS_mmap_pgoff+0x249/0x510 [ 197.323318] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 197.323327] ? SyS_clock_settime+0x1a0/0x1a0 [ 197.323338] ? do_syscall_64+0x4c/0x640 [ 197.323348] ? align_vdso_addr+0x60/0x60 [ 197.323359] do_syscall_64+0x1d5/0x640 [ 197.323375] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 197.323383] RIP: 0033:0x45ca59 [ 197.323388] RSP: 002b:00007f2358635c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 197.323399] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 197.323404] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 197.323410] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 [ 197.323416] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 197.323421] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f23586366d4 20:00:06 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r0, r1, 0x0, 0x800000080004103) 20:00:06 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x1, 0x1, 0x25da4a22}) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000040)={0x1}) fcntl$setpipe(r2, 0x407, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000000, 0xc0851, r2, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r4, 0xffffe000) 20:00:06 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:06 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:06 executing program 1: r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) times(&(0x7f0000000080)) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[]]}, 0x178) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') timer_create(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fd) 20:00:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 198.050292] ubi0: attaching mtd0 [ 198.054790] ubi0: scanning is finished 20:00:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a30d01d38d8dab6e9ff0743a8c659fba8b78f2fd1b89910c0ff018c84dd7696ca"], 0x3a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x4000001) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r3, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4107, 0x100b}], 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r4, 0xcc2, 0x2, [0xff, 0xa1]}, 0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={r4, 0x4}, 0x8) 20:00:07 executing program 0: syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) 20:00:07 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r0, r1, 0x0, 0x800000080004103) 20:00:07 executing program 0: syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) [ 198.213800] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 198.235661] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 198.235669] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 20:00:07 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r0, r1, 0x0, 0x800000080004103) 20:00:07 executing program 0: syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) [ 198.235793] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 198.235799] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 20:00:07 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) mmap(&(0x7f000035b000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x4000) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f00000e5000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x4c889000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000140)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000100)={0xffff, 0x1}) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc, 0x11, r1, 0x75442000) inotify_init1(0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 198.235806] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 198.235813] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 20:00:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r1, 0x0) [ 198.235820] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 198.235841] ubi0: background thread "ubi_bgt0d" started, PID 8896 [ 198.236885] ubi0: detaching mtd0 20:00:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r1, 0x0) [ 198.251577] ubi0: mtd0 is detached 20:00:07 executing program 3: r0 = getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x41, 0x2, 0x0, 0x8, 0xfffffffffffffffe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x2e) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) prctl$PR_SET_UNALIGN(0x6, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x36488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x4, 0x800) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f00000000c0)=0xffffffff, 0x4) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e23, 0x7, @private2}, 0x1c) listen(r3, 0xfc) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080), 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040), 0x8) [ 198.760176] audit: type=1400 audit(1592683207.650:18): avc: denied { name_connect } for pid=8931 comm="syz-executor.3" dest=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 20:00:07 executing program 1: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000000)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10) dup3(r2, r1, 0x0) 20:00:07 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x15, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x40) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x2, 0x500c0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000280)=0x2) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) 20:00:07 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r0, r1, 0x0, 0x800000080004103) 20:00:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r1, 0x0) 20:00:07 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r0, r1, 0x0, 0x800000080004103) 20:00:07 executing program 3: socket$rxrpc(0x21, 0x2, 0x2) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000100)=0xaff) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000000414200026bd7000fcdbdf250800010002000000080001000000000008000100000000000800010002000000fa25b1017fd5304cde5c1b76511c41d1b8c94a895f476261b9f7a87dc06c2f5ca45a6fd6a5e80deeda8611e4abf400b89621bb77ec54f2ca9a8c2e0d3696c304b74d9e8f7abc17f4b9b0c107e82b7449ed0a4fb7a4221820286220675dc40ca7c81d3765fe611c22632334396d78d59719ebc1759e9cb09fd4cc9c415eb5820127fa45ab0007e3110e95b1d0b16641276edfba947a9dd1b854c2af220ca49bcafa"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x7) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf17) unshare(0x40040400) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x333000, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f00000001c0)) 20:00:07 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 20:00:07 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f00000e7000/0x3000)=nil, 0x3000, 0xc, 0x1010, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x1, 0xd89, 0x9, 0xfffffffc, 0x1, "1d124a12cd4b57d9e1e21f0a8d19ef717eb4d8"}) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendfile(r0, r4, 0x0, 0x9c) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40, 0x0) signalfd(r5, &(0x7f00000000c0)={[0x9]}, 0x8) 20:00:08 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 20:00:08 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r0, r1, 0x0, 0x800000080004103) 20:00:08 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:08 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x801, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040814}, 0x10000084) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setns(r4, 0x10000000) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getpeername$l2tp6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x20) 20:00:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000000c0)) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') sendfile(0xffffffffffffffff, r8, &(0x7f0000000040)=0x100060, 0xa808) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000011000d0400"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000240019800c00020062617461"], 0x44}, 0x1, 0xc00000000000000}, 0x0) 20:00:08 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 20:00:08 executing program 2: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(0x0, 0xf0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r2, 0x7}}, 0x10) mount$bpf(0x20000000, 0x0, 0x0, 0xc50c4, 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x5890, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) 20:00:08 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = socket$isdn(0x22, 0x3, 0x26) mmap(&(0x7f0000167000/0x1000)=nil, 0x1000, 0x2000006, 0x11, r1, 0xafa3000) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x76006e) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000000)={0x0, 0x10001, 0x1}) mmap(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x0, 0x10010, r2, 0xd209f000) 20:00:08 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 199.807456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.879668] IPVS: ftp: loaded support on port[0] = 21 [ 199.944207] batman_adv: batadv0: Adding interface: ipvlan2 [ 199.944220] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.944226] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 199.996512] batman_adv: batadv0: Removing interface: ipvlan2 [ 200.159222] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.182841] batman_adv: batadv0: Adding interface: ipvlan2 20:00:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540), 0x0, 0x121, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x3ff, 0xff, 0x5, 0x1f}, {0x6, 0xc0, 0x2, 0x80000001}, {0x1, 0x7, 0xd0, 0x400}, {0x71e0, 0x1, 0x40, 0x7}, {0x1, 0x3f, 0x4, 0xffffffff}]}, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x80, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ffa22b3f1e0b02bd67aa03059bcecc7a95c25a34ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0xc091, 0x0, 0xf7) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000100)={0x7, 0xffff, 0x7, 0x5, 0xf, "3a1a13aeeb69ca87"}) 20:00:09 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0xfffffffa, 0x5, 0x0, 0x0, 0xd53, 0x7f, 0x6, 0x9, 0x800, 0x0, 0xf2e2, 0x3, 0xfffffffc, 0x40, 0x10, 0x30, {0x2, 0x80000000}, 0xff, 0x5}}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000306010100000010000000000a00000605000100070000050000000005000100070000000000003b40d77547b2b53dec"], 0x34}, 0x1, 0x0, 0x0, 0x404c881}, 0x20008004) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:09 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') preadv(r0, &(0x7f0000000240), 0x0, 0x25) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x3, &(0x7f0000000300)=0x4) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0)='NLBL_CALIPSO\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x440000, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x24080044) msgget$private(0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000480), 0x8) r1 = gettid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r1) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) fadvise64(r3, 0x3, 0x8, 0x2) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e74467713322e21da765cd1ce2356a8f856f0bf8814c07b4e595314f0771b65d33e129933dd93f99f03cd6b3e5903e15c16676dddb592a67f706e"], 0x194) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) creat(&(0x7f0000000140)='./file0\x00', 0x2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) 20:00:09 executing program 0 (fault-call:3 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:09 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 200.188600] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.215808] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 200.232683] batman_adv: batadv0: Removing interface: ipvlan2 20:00:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000000c0)) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') sendfile(0xffffffffffffffff, r8, &(0x7f0000000040)=0x100060, 0xa808) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000011000d0400"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000240019800c00020062617461"], 0x44}, 0x1, 0xc00000000000000}, 0x0) 20:00:09 executing program 0 (fault-call:3 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 200.351545] FAULT_INJECTION: forcing a failure. [ 200.351545] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 200.351557] CPU: 0 PID: 9066 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 20:00:09 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = dup3(0xffffffffffffffff, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000010) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, 0x0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r3, 0x0) [ 200.351563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 20:00:09 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x0, @remote}, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast1}, 0xef}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x80000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) fchmodat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file1\x00') pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB], 0x74}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25060000005000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020065727370616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300ba010000003000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000044000180140002007665746831000000000000000000000008000300010000001400020064756d6d79300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4800018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000300010000000800030002000000140002007767300000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="040001803000018008000100", @ANYRES32=0x0, @ANYBLOB="14000200726f736530000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000380001800800030002000000140002007663616e300000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300020000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="04000180"], 0x1a8}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) write(0xffffffffffffffff, &(0x7f0000000480), 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={0x0, @isdn={0x22, 0x0, 0x0, 0x40, 0x7}, @l2={0x1f, 0x5, @fixed={[], 0x12}, 0x0, 0x2}, @l2={0x1f, 0x0, @any, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='wg1\x00', 0x8, 0x0, 0x1278}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="36b29d002d2da701ded5f3eab6e34cb17b3c257c674615998c16ec6ec4a604822fe476632412ad0f4e311075f6aabba361fce2ab173d42c71462efbc4f5a5db04d67873095dc67d7bcd1b9abb60d6ca28ca9f5a7fb52a90e37319aedc74b6aaa0119fedd95a1a8241c9c3ee86bcb012236c04d54f8e310dfb011", @ANYRES16=0x0], 0x28}}, 0x80) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) 20:00:09 executing program 0 (fault-call:3 fault-nth:2): r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 200.351567] Call Trace: [ 200.351584] dump_stack+0x1b2/0x283 [ 200.351600] should_fail.cold+0x10a/0x154 [ 200.351617] __alloc_pages_nodemask+0x22b/0x2730 [ 200.351634] ? kasan_slab_free+0xaf/0x190 20:00:09 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x202) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x30c8, 0x10, [{0x4}, {0xd, 0x1}, {0x6}, {0x2, 0x1}, {0x8}, {0x6, 0x1}, {0xc}, {0xf}, {0x4}, {0xd, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0xa}, {0x9, 0x1}, {0x7, 0x1}, {0xc}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:09 executing program 0 (fault-call:3 fault-nth:3): r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 200.351646] ? free_pgd_range+0x87a/0xd10 [ 200.351655] ? free_pgtables+0x1ec/0x2b0 [ 200.351665] ? unmap_region+0x246/0x320 [ 200.351674] ? do_munmap+0x4fd/0xc40 [ 200.351683] ? mmap_region+0x16e/0x1060 [ 200.351694] ? SyS_mmap_pgoff+0x249/0x510 [ 200.351706] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 200.351717] ? debug_check_no_obj_freed+0x27c/0x5fd [ 200.351731] ? lock_acquire+0x170/0x3f0 [ 200.351741] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 200.351757] ? debug_check_no_obj_freed+0x27c/0x5fd [ 200.351773] ? alps_report_mt_data.isra.0+0x80/0x1a0 [ 200.351789] alloc_pages_current+0xe7/0x1e0 [ 200.351797] ? ___pte_free_tlb+0x44/0xc0 [ 200.351815] __get_free_pages+0xb/0x40 [ 200.351825] tlb_remove_table+0x108/0x1e0 [ 200.351837] free_pgd_range+0x87a/0xd10 [ 200.351859] free_pgtables+0x1ec/0x2b0 [ 200.351933] unmap_region+0x246/0x320 [ 200.351946] ? anon_vma_compatible+0x290/0x290 [ 200.351965] ? inode_has_perm.isra.0+0x153/0x1d0 [ 200.351980] ? __vma_rb_erase+0x3f9/0xa00 [ 200.351989] ? userfaultfd_unmap_prep+0x2ed/0x450 [ 200.351999] ? vma_compute_subtree_gap+0x18b/0x1f0 [ 200.352011] do_munmap+0x4fd/0xc40 [ 200.352025] mmap_region+0x16e/0x1060 [ 200.352041] do_mmap+0x5b3/0xcb0 [ 200.352056] vm_mmap_pgoff+0x14e/0x1a0 [ 200.352072] ? vma_is_stack_for_current+0xb0/0xb0 [ 200.352084] ? __fget+0x226/0x360 [ 200.352099] SyS_mmap_pgoff+0x249/0x510 [ 200.352117] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 200.352130] ? SyS_clock_settime+0x1a0/0x1a0 [ 200.352140] ? do_syscall_64+0x4c/0x640 [ 200.352148] ? align_vdso_addr+0x60/0x60 [ 200.352160] do_syscall_64+0x1d5/0x640 [ 200.352174] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 200.352182] RIP: 0033:0x45ca59 [ 200.352187] RSP: 002b:00007f85f3cb1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 200.352196] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 200.352202] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 200.352207] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 [ 200.352213] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 200.352219] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f85f3cb26d4 [ 200.381075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.442446] batman_adv: batadv0: Adding interface: ipvlan2 [ 200.442459] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.442464] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 200.452996] FAULT_INJECTION: forcing a failure. [ 200.452996] name failslab, interval 1, probability 0, space 0, times 0 [ 200.453008] CPU: 0 PID: 9080 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 200.453013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.453017] Call Trace: [ 200.453033] dump_stack+0x1b2/0x283 20:00:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000280)=""/53, 0x35}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000200)=""/114, 0x72}], 0x3, &(0x7f0000000480)=""/80, 0x50}, 0x1}, {{&(0x7f0000000500)=@tipc, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/141, 0x8d}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000300)=""/128, 0x80}, {&(0x7f00000006c0)=""/252, 0xfc}], 0x4, &(0x7f0000000800)=""/114, 0x72}, 0x2007}, {{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000001100)=""/251, 0xfb}, {&(0x7f0000000c80)=""/132, 0x84}], 0x4, &(0x7f0000000d40)=""/87, 0x57}}, {{&(0x7f0000000dc0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/3, 0x3}], 0x1, &(0x7f0000000ec0)=""/196, 0xc4}, 0x80000001}], 0x4, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000440)}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x109000, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000008c0)="c33ce2802b36db9175a2b9b0a85bed5037668d92b724508694a310107d671a83d49810f5b5af6a371d8260e58fb71ba47e21ce46e6fafb2071b4dc04a9b1cf95e1e9dea3f8f21beee2d30e00773beed0579a227ba98fd166977735e2246ea03ce941429150c8d537404ce15757dcd23f5f51652f91c59217733665c852b7b454ecc98cd3b80eb5141ad9e7d72d7ef1e63d894561d6562c7028166c376ad9f06923be0491dd001a2c91574a20690a644e2e11232538b21e") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}, @in={0x2, 0x4e22, @local}], 0x20) epoll_create1(0x0) 20:00:10 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) mmap(&(0x7f000028c000/0x1000)=nil, 0x1000, 0x6, 0x2010, r2, 0xcfeaf000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffbff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xca6e}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3000}]}, 0x88}, 0x1, 0x0, 0x0, 0x6}, 0x24048005) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x50, r1, 0x42f22000) [ 200.453048] should_fail.cold+0x10a/0x154 [ 200.453062] should_failslab+0xd6/0x130 [ 200.453071] kmem_cache_alloc+0x28e/0x3c0 [ 200.453082] mmap_region+0x613/0x1060 [ 200.453096] do_mmap+0x5b3/0xcb0 [ 200.453110] vm_mmap_pgoff+0x14e/0x1a0 20:00:10 executing program 0 (fault-call:3 fault-nth:4): r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:10 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10, 0x0, 0x5, 0x200000000000000, 0x414}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x80) fsync(0xffffffffffffffff) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200000008a105d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() tkill(r4, 0x3c) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) syz_read_part_table(0x4000000000001, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000380)="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", 0x1000, 0xffffffff7fffffff}, {&(0x7f00000000c0)="19b893d503dc6efddc58ad9ee50e03937c4e9f3f4fa50e95769f4925f17ba034c7fd1a897b2620eea15b2c72d07a4c4a0999277a7feaaefc4d2b39224e527b", 0x3f, 0x10003}, {&(0x7f0000001380)="cf386d53685c6cbb409da8c6313c4e2e194ce6274879d04e31affabe6f2afa9eda8510ff201fb01d91574494cd29090fdb0e4b35823e002950dad07d820197e9dcb00d167d28368198210ac4cd520d9ac3981612734aa732ca374891749f0809e088cc54f33b6762e102f57b36f8f27010506c29b7e0571d2f786118ecce8741f01395d894db2f3475262357fb375ebe5523ff2296245fc82a5de9a9e0b0bea44882af1b36e83c8306c953", 0xab, 0xfffffffffffffffd}]) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000000200036150, 0x800007b, 0x0, 0x0, 0x40, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001440)=ANY=[@ANYBLOB="8a15852c523f1651d07cfaf3b7c6949ce8ff55b58686de96d585b12a39476906007746aa74b4be189d1900010000004056e322bc49798aa6fb3962a5805d000020000000000000000000000000004f01000000000013869a28734863a92402032b5c0a990c8672d755c0d7a9074ccaafe41e31e89618d18e71926cb7c111656d49ba2c801b546fe4523feee5ae5a5c292688c6f2f81de849bb89ef50f91aaa25306d9aa6f6321566f0ed3d1bed23663df11485c93797a941c3ead7cd158cd3452dd60caa37185d1c234f6c5ad7b1eb3214c6c6d9e9f6cb7cbfc46e7ef9c2a7c184bdc90e6ddbec197da63ed3ed1dda55e77bc7676c9e818d30d51ead3464bc800bc64c68623c28984d54977e37ac94c95fd5e2c6a3e8981fc11fa8cee1616c78816df038600d00005c44eb75a5755ff1bea45057bcb0dceca345d87ec2613889fbe21b0f27245ad550839d54564b745086360bfdffd163f8c73572d38c1429a67fd80cee86db385558299f10c3d0d35f20a50b95690086647595ce350fd6fa3b697dc6647f64a726de65b6ed45c6cb20a89aad724a745377bd2587e3b5771d2d02bbce692f8db6d64bb5885b93855ccab864cb7fc3639ff7d11878346d31ab1d472dd04a353db2c5a96acee6ce1925f756797f3645abd18a5b8489452d88c59e256af2d18f70d470a4fd2b1aead41f25cbf0e7089cca7089f6a99dcc4c99746629facfb073f51e903bf77ba975b3eb0541b635833ccc02c361b33be092f121454c567fcaeb56525420c338b143cfb81f343c2b42774f49655dd1abf51d2148c01135a45c2c525522a44336465684938a909687c698c35391fcac0e9c3eee465b7b74390543aee5b8753de843000000001372dceca76df70d93aea548eb7b8d67457a2da54e8f15d862c969f212476f5bbab8d3a9e40270235b64e2bc5b1ea6a2cc0525b8149ad9ca87d4dc73a0cc8d0bd48e92e280295a431bb1a271550bd6cbffc265dfb97bd84a9c6e751ef6fbe52bbe5a1a00c958722f6e6a2ce4f1962286465dd43db62c2b85d54448aef343f5ff1dda65a51655df7832ce85e78782e8abf3a5cd56af78fcc29c35c920df5acaf3"], 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 200.453124] ? vma_is_stack_for_current+0xb0/0xb0 [ 200.453133] ? __fget+0x226/0x360 [ 200.453145] SyS_mmap_pgoff+0x249/0x510 [ 200.453155] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 200.453163] ? SyS_clock_settime+0x1a0/0x1a0 [ 200.453173] ? do_syscall_64+0x4c/0x640 [ 200.453180] ? align_vdso_addr+0x60/0x60 [ 200.453189] do_syscall_64+0x1d5/0x640 [ 200.453200] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 200.453207] RIP: 0033:0x45ca59 [ 200.453222] RSP: 002b:00007f85f3cb1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 200.453233] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 200.453240] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 200.453246] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 [ 200.453252] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 200.453257] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f85f3cb26d4 [ 200.470124] batman_adv: batadv0: Removing interface: ipvlan2 [ 200.535987] FAULT_INJECTION: forcing a failure. [ 200.535987] name failslab, interval 1, probability 0, space 0, times 0 [ 200.536000] CPU: 0 PID: 9089 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 200.536004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.536007] Call Trace: [ 200.536024] dump_stack+0x1b2/0x283 [ 200.536039] should_fail.cold+0x10a/0x154 [ 200.536054] should_failslab+0xd6/0x130 [ 200.536064] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 200.536079] usbdev_mmap+0x132/0x6c0 [ 200.536089] ? mmap_region+0x613/0x1060 [ 200.536098] ? usbdev_open+0x780/0x780 [ 200.536110] ? rcu_read_lock_sched_held+0x10a/0x130 [ 200.536118] ? kmem_cache_alloc+0x35f/0x3c0 [ 200.536128] mmap_region+0x8a8/0x1060 [ 200.536143] do_mmap+0x5b3/0xcb0 [ 200.536158] vm_mmap_pgoff+0x14e/0x1a0 [ 200.536173] ? vma_is_stack_for_current+0xb0/0xb0 [ 200.536194] ? __fget+0x226/0x360 [ 200.536218] SyS_mmap_pgoff+0x249/0x510 [ 200.536232] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 200.536243] ? SyS_clock_settime+0x1a0/0x1a0 [ 200.536255] ? do_syscall_64+0x4c/0x640 [ 200.536263] ? align_vdso_addr+0x60/0x60 [ 200.536275] do_syscall_64+0x1d5/0x640 [ 200.536291] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 200.536299] RIP: 0033:0x45ca59 [ 200.536304] RSP: 002b:00007f85f3cb1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 200.536314] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 200.536320] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 200.536326] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 [ 200.536331] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 200.536336] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f85f3cb26d4 [ 200.604640] FAULT_INJECTION: forcing a failure. [ 200.604640] name failslab, interval 1, probability 0, space 0, times 0 [ 200.604652] CPU: 0 PID: 9099 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 200.604658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.604662] Call Trace: [ 200.604679] dump_stack+0x1b2/0x283 [ 200.604696] should_fail.cold+0x10a/0x154 [ 200.604712] should_failslab+0xd6/0x130 [ 200.604723] __kmalloc+0x2c1/0x400 [ 200.604734] ? hcd_buffer_alloc+0x2ba/0x3f0 [ 200.604747] hcd_buffer_alloc+0x2ba/0x3f0 [ 200.604759] ? hcd_buffer_destroy+0x90/0x90 [ 200.604774] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 200.604787] usb_alloc_coherent+0x5d/0x80 [ 200.604799] usbdev_mmap+0x178/0x6c0 [ 200.604808] ? mmap_region+0x613/0x1060 [ 200.604818] ? usbdev_open+0x780/0x780 [ 200.604828] ? rcu_read_lock_sched_held+0x10a/0x130 [ 200.604836] ? kmem_cache_alloc+0x35f/0x3c0 [ 200.604847] mmap_region+0x8a8/0x1060 [ 200.604863] do_mmap+0x5b3/0xcb0 [ 200.604878] vm_mmap_pgoff+0x14e/0x1a0 [ 200.604894] ? vma_is_stack_for_current+0xb0/0xb0 [ 200.604906] ? __fget+0x226/0x360 [ 200.604921] SyS_mmap_pgoff+0x249/0x510 [ 200.604935] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 200.604942] ? SyS_clock_settime+0x1a0/0x1a0 [ 200.604952] ? do_syscall_64+0x4c/0x640 [ 200.604962] ? align_vdso_addr+0x60/0x60 [ 200.604973] do_syscall_64+0x1d5/0x640 [ 200.604989] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 200.604997] RIP: 0033:0x45ca59 [ 200.605002] RSP: 002b:00007f85f3cb1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 200.605013] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 200.605019] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 200.605024] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 [ 200.605030] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 200.605035] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f85f3cb26d4 [ 200.703756] overlayfs: filesystem on './file0' not supported as upperdir [ 201.286206] FAULT_INJECTION: forcing a failure. [ 201.286206] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 201.286228] CPU: 0 PID: 9123 Comm: syz-executor.0 Not tainted 4.14.184-syzkaller #0 [ 201.286234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.286237] Call Trace: [ 201.286255] dump_stack+0x1b2/0x283 [ 201.286272] should_fail.cold+0x10a/0x154 [ 201.286287] __alloc_pages_nodemask+0x22b/0x2730 [ 201.286300] ? find_next_iomem_res+0x215/0x3f0 [ 201.286312] ? pagerange_is_ram_callback+0xbf/0x100 [ 201.286323] ? pat_enabled+0x10/0x10 [ 201.286330] ? walk_system_ram_range+0x127/0x160 [ 201.286338] ? walk_system_ram_res+0x110/0x110 [ 201.286350] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 201.286364] ? __init_cache_modes+0x1f0/0x1f0 [ 201.286374] ? kmem_cache_alloc_trace+0x14d/0x3f0 [ 201.286384] ? lookup_memtype+0x49/0x180 [ 201.286393] ? reserve_pfn_range+0xb9/0x380 [ 201.286406] alloc_pages_current+0xe7/0x1e0 [ 201.286416] pte_alloc_one+0x15/0x100 [ 201.286433] __pte_alloc+0x21/0x280 [ 201.286445] remap_pfn_range+0x9f7/0xc90 [ 201.286466] ? hcd_buffer_destroy+0x90/0x90 [ 201.286478] ? __pmd_alloc+0x3a0/0x3a0 [ 201.286491] usbdev_mmap+0x357/0x6c0 [ 201.286499] ? mmap_region+0x613/0x1060 [ 201.286508] ? usbdev_open+0x780/0x780 [ 201.286519] ? rcu_read_lock_sched_held+0x10a/0x130 [ 201.286528] ? kmem_cache_alloc+0x35f/0x3c0 [ 201.286540] mmap_region+0x8a8/0x1060 [ 201.286555] do_mmap+0x5b3/0xcb0 [ 201.286571] vm_mmap_pgoff+0x14e/0x1a0 [ 201.286586] ? vma_is_stack_for_current+0xb0/0xb0 [ 201.286597] ? __fget+0x226/0x360 [ 201.286612] SyS_mmap_pgoff+0x249/0x510 [ 201.286625] ? find_mergeable_anon_vma+0x2b0/0x2b0 [ 201.286634] ? SyS_clock_settime+0x1a0/0x1a0 [ 201.286643] ? do_syscall_64+0x4c/0x640 [ 201.286651] ? align_vdso_addr+0x60/0x60 [ 201.286660] do_syscall_64+0x1d5/0x640 [ 201.286676] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 201.286683] RIP: 0033:0x45ca59 [ 201.286688] RSP: 002b:00007f85f3cb1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 201.286697] RAX: ffffffffffffffda RBX: 00000000004f67e0 RCX: 000000000045ca59 [ 201.286702] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000000020000000 [ 201.286707] RBP: 000000000078bf00 R08: 0000000000000004 R09: 0000000000000000 20:00:11 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66696c65302c776f726b6469723d2e2f66696c65314c22b02fcbccd2c8ecc7ef49b7f528dac3096d3fca8e65f83c7392657fd65e00c8dd0f5b12c20259ff939e51e4bba5fc9024a94ff65bcd9da370b041caa6337b69153781b2d51520867b7910ae0673ec9d4cb3adcfe315264407c19c6305fc1adbeeabbd0162a7142cc37be1ff7dbb173953bc1ed791ef8000000090d7f1f22a854ac73209b81787d29263d733be5760f6f6e3ae11c8518d2857d7451e230f704c928c4cc1879ee25659ca23cae78aa9"]) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3fffffd) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000200)={0xffffffffffffffff, r0, 0xffff, 0x0, 0x0, 0x4e, 0x0, 0xffd3, 0x81, 0x1000, 0x3, 0x0, 'syz0\x00'}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="e6ed9a3b96f1c3ed263a73819d539fe9a1cf994167a298ef02a087b0c5675e83d37a03172942a4c66197a0de0b90877cb18a2324db0f7e68f075a7d979c7fbb036fd39f60c6803dbbcc03229bde7d7ade7b636e0ae04", @ANYRES16=r4, @ANYBLOB="000025bd7000ffdbdf250200000008000400e00000021400020000000000000000000000ffff7f0000011f00070073797374656d5f753a6f626a6563745f723a6c69625f743a73300000080005000000000014000200fc00"/102], 0x6c}, 0x1, 0x0, 0x0, 0x4048050}, 0x4081) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, 0x0, 0x4008890) socket(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x0, "777fed", "406242df508922f17f731a3efc360050595e98c50f273ceb06bbfb28cbb9dcb4e6a0aeced9029eb03ee3f0d60115ebd4912bc5e6b252acc93994f32baf51f70a9a1ac3a8fd463383e4827797989abee4ba2ee34ede870125b7848e9c050a02bf1cab9385f35a7bf540d918df086c08e91b8d1b632910af554a215bf3cdfee03a489e7ba6f1d7500de957b5e9df6edb5bf208dd7002505cf6cc60ec312246195d8c2eb900cabf5010f80d411c43879e914458d3f6f4ac4b45aab5e27725116f74c57c1430418cc6d3e8465de99169d7e872b3c7fe5594cf43e29d4bc033e96fc16d555aedc47a18d04c9330829e48753d6dcfb849cdf36070eee4fd62b9af8c6c"}}, 0x110) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0xfb4}}, 0x18) renameat(r5, &(0x7f0000000180)='./file1\x00', r5, &(0x7f00000007c0)='./file0/f.le.\x00') 20:00:11 executing program 0 (fault-call:3 fault-nth:5): r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:11 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) bind$isdn(r1, &(0x7f0000000040)={0x22, 0x7, 0x6b, 0x7, 0x1}, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x80000, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000100)={0x4, [0x3, 0x6, 0x6, 0x595c]}, 0xc) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000140)={0x6, 0xe1c, 0x1}) recvfrom$l2tp6(r2, &(0x7f0000000000)=""/58, 0x3a, 0x20, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000119000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 20:00:11 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x13) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00(\x009\r\x00'/20, @ANYRES32=r5, @ANYBLOB="40b689060000ffff0000000008000100627066003800020034000100300000000a00010006000c00070000000000000000000c000800000000000000000006000500"/84], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0}, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) bind$rds(r6, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 20:00:11 executing program 3: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x400000, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) r3 = getpid() sched_setattr(r3, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, r3, 0xfff7fbffffffffff, r2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="916f8e9622f0471a1192785c09d2fa4a94eee73552c6d2ed5d40e18449e8daa8f34cf9278fd800"/54, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="200000000000000884000000000000", @ANYRES32=r4], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r4, 0xcc2, 0x2, [0xff, 0xa1]}, 0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r4, 0x9}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @multicast1}], 0x20) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x147c42, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) ftruncate(r5, 0x200004) sendfile(r0, r5, 0x0, 0x80001d00c0d0) [ 201.286711] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000005 [ 201.286716] R13: 0000000000000755 R14: 00000000004ca40b R15: 00007f85f3cb26d4 [ 202.613665] overlayfs: failed to resolve './file1L"°/ËĚŇČěÇďI·ő(ÚĂ m?ĘŽeř0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x81ef3646ad732ff9, 0xfffffffd, 0x2, r4}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r4, 0x6640, 0x2, [0xff, 0xa1]}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x1f, 0x3, 0x3, 0x2, 0x1, 0x1, 0x8001, r4}, 0x20) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x4800) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x20010, r5, 0x6000) r6 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x11, r6, 0x0) 20:00:12 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:12 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {r3, 0x0, "777fed", "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"}}, 0x110) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r3, r4}}, 0x18) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) exit_group(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r8, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000040700000000000000000000e3001fdf48db9e1c5a5b431a7a9dad35161829dacb4af72ddadc48e98028d14ddb4a9a175d848637975f4d0fefb7516404974ee23e00513c395cf2222028a2148b25f5ee9ba470119014036b7af570f9114838f97e", @ANYRES32=r7, @ANYRESHEX=r8], 0x3c}}, 0x0) 20:00:12 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 203.522939] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 20:00:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f00000003c0)="7dd26e1a89064475496fb2ec7cf31b7ecaed41533bce3f48748dfe13fe35f85943329ad90f45025bf95b961315d4868b3ef72757151dbe63d67d13f75943e0acb113207611a7e883ec4b5f0e7c8ba97c16d235d5c5f73c5345b703fcc6ebb977054274f7cb1c0eda92d2994150929abe6e6d167a126b635fa3683f6d599b3f4b22baea7d7b4711451492140512775c97dc32e111800103fb8f563da4f1c82bf39de3c2d65c84262e55540f0c617d69750297a40c79905b41e5e4d0c0a5b5c1ef40c8b5cd10be2e", 0xffffffffffffffdf) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r4 = creat(&(0x7f0000000380)='./file0\x00', 0x108) fallocate(r4, 0x0, 0x0, 0x1000100) mkdir(0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') semget$private(0x0, 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:00:12 executing program 3: ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0192070000fffffffffffffa00009f14200100"}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180), &(0x7f00000001c0)=0x20) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000140)='team_slave_0\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000070053ef", 0x4db, 0x400}], 0x4810, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000200)) 20:00:12 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:12 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x910) [ 203.773182] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 203.820446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 203.820484] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended 20:00:12 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 203.820583] EXT4-fs (loop3): Can't read superblock on 2nd try 20:00:12 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:12 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f00000002c0)="21ac6cc3f910299c2a28d17135cace5945cc9fa42466d0486485325898fa2fafb118616ec4ae60c341e785fe4b927612bf439e09c2df22835dd95a984a29fd1e6014f3af30d99ea36063bca879c5ff5c0d10d0f53fd110c981b3df546a0ffe7bc3d042f23a5eacd5e1f6c1ea33e054a54ef90f332434679ffe8275eb8260e46cad1f2a33170212fc8a1f6899142b415884ec075504e1f152667467c076052a404476ac1a62c1222240821420285e1abc0f2195e3e1977ff3e903fbc398b980e07ad4462ad1fb658eb206", 0xca, 0xc9}]) r7 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x100) sendfile(r5, r7, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 20:00:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r4, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000854) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) [ 204.348278] audit: type=1804 audit(1592683213.241:21): pid=9263 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir107597399/syzkaller.4T3iDk/36/bus" dev="sda1" ino=15956 res=1 20:00:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r2 = open(&(0x7f0000000600)='./bus\x00', 0x22, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69, 0x20}, 0x14) 20:00:13 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) dup(r1) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:13 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 204.681281] audit: type=1800 audit(1592683213.581:22): pid=9287 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=15938 res=0 20:00:13 executing program 1: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x64082) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r3, 0xf2b, 0x0, 0x0, {0x32}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5c, 0x2, [@TCA_RSVP_ACT={0x58, 0x6, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="0a6a3ab430c3"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x91b6183750286c8e}, 0x440c0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:00:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x20001aa4, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000000)=0x7c6, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:13 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0900000024000713000000ddd335902838a41060", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5c, 0x2, [@TCA_RSVP_ACT={0x58, 0x6, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00e3ff0000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c0000002c033b9007a18c76495c6de5e200270d00"/32, @ANYRES32=r5, @ANYBLOB="0000000000000000040000000a00010072737670360000005c0002005800060054000100090001006761637400000000280002800c0003000000000000000000180002000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0x8c}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10080020}, 0xc, &(0x7f0000000600)={&(0x7f0000000a80)=ANY=[@ANYBLOB="94030000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="540202803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ae010000400001002400010071756575655f6964000000000000000000002000007a00000000000000000000000500030003000000080004002c6f4a431effffffef08000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400810000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="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"], 0x394}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0x11, r0, 0x1000) r6 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r6, 0x0) 20:00:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x40, 0x397800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 204.783705] audit: type=1800 audit(1592683213.611:23): pid=9289 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="sda1" ino=15938 res=0 [ 204.865084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.881213] ubi0: attaching mtd0 [ 204.883261] ubi0: scanning is finished [ 204.895250] device veth3 entered promiscuous mode [ 204.898358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=812 sclass=netlink_route_socket pid=9304 comm=syz-executor.4 [ 204.927954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 205.013339] audit: type=1804 audit(1592683213.911:24): pid=9320 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir107597399/syzkaller.4T3iDk/36/bus" dev="sda1" ino=15956 res=1 [ 205.030911] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 205.081194] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 205.087890] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 205.087901] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 205.106812] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 205.114316] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 20:00:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="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"/4105], 0x1009, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000010c0)) 20:00:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) 20:00:14 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x46000) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x0, 0x0, r1}]) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) io_submit(0x0, 0x3, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000000)="8c4640105e39c49f8fbfd252b3c8a4714df20f2987fb5a2b124bc1f44e589b202cd0fd6b4057fb15a928b2273a3df8f84aeb84f6b7e8aabef65b9e2691174bed25f5795d2ea296c46b9a2fc380a55036923ecfc78c3159b338865a8fa6990367e6481dbef9bc463a3d61a6ab56ccc488dd4f4b63f48438ed7ae731a959ae996fc675d9909f88577529882625444794bb070f00deeefc3d4c0b86cc6047f4559216ff9414391a0ff666fb7882dae9e37e63ad1d2639f368d9bff6e7409558bc693c9e22b8bdf59ed4c0ee3bd46a58a9c43c91c4046da448a7a2de6b45f74656", 0xdf, 0x9, 0x0, 0x2}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x3f, 0xffffffffffffffff, &(0x7f0000000140)="aa1fe0c6918132e05f72aae858fabfd2d9a31977685e249018c7a48fe504d81b0db59394deb47b08b1949421c554e27de7fdac2a89bb89c3c038a0a1d3dfcd0f", 0x40, 0x6, 0x0, 0x3, r3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x1, r4, &(0x7f00000001c0)="82ca2b86b7ef69245fe6b843896b6a78ae7bd2c99ab1960e8856fde0e94fa511f268b1b37e414dc0b1370a9daf43c75214e2c511c9778a6555ce7e11fafc3602a6aa64f6fc34e05501e835cf6769b21da7265f783cc0b5a66affcbf7f527652341b91107927676ec8d83bfe96900ab340915a4122709fa6cb59cadcdf817a1bedd6b613676e733561c8b40edbf86fce48b4cb0e2e2833c1165bda81e6828506923671819382252eeaa49c1233acd7052fde19bc3c5b550fb9634c1cf25aac86cdb0bb1149f70d35cd4", 0xc9, 0x8, 0x0, 0x1, r5}]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r6, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x40186f40, 0x76006e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r7, &(0x7f0000000340)="2dc99f6fc976b9fd5d36a69cb645e19bb4a32ea83b85380e037e4899a44c15eecf8db75c5c65ad2b7bc99443b119d2fa204a9538374954ae7d799cc23c9a8ec5f136a7067bb787ac342ce26da385f2546d91915dff2938585528136ab7798924146a4aeafe84d2c072106b77f33757165e90947f6029c06f23b3278f0e7416a0825d6ed88a5041c9e9ebfaedff1ecef994d4d8efe8233606484c48fd246398f8c1b74e671afb13da5f7caec12840fbfdbe89854808481111a441d38d24e0323cf4643dc63adac3d9fef68d1a29c77f21482fd3768a96118002aa8f76668cc3adb4df806fbb38077689", &(0x7f0000000440)=@tcp6=r8, 0x1}, 0x20) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7fff) 20:00:14 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={[], 0x37}, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x3c, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @private=0xa010102, {[@ssrr={0x89, 0x3}]}}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @dev}}}}}}, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf32(r2, &(0x7f0000000580)=ANY=[@ANYRES64=r1], 0xfffffd6d) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000001c0)={0x0, 'ipvlan1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="01ad000028fa0200000000000000da7dd5d69a1e2bbc14152d3262609a1cff53e20a4d63e610cddd8eb278b4c59ef850700fc57101d9af2d2a063ab130a5021fe9c5824ead9be8608bed9ec5e4d7a51d48de03c1ae8c75970a55cc62909243eb3dad35dac4596c52f7019bd4abd763f64ed9eeeb30997cfcf1769e3cba244f3d041277fc9f5fe6bf814ec94a4b58716365968028d388bb059bb6fea3fbf4751dd73702544a7ec1", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = dup(r6) sendmsg$NFT_BATCH(r7, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x2fc}, 0x1, 0x0, 0x0, 0x20040010}, 0x20040010) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r5, 0xcc2, 0x2, [0xff, 0xa1]}, 0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={r5, 0xff}, &(0x7f0000000040)=0x8) 20:00:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 20:00:14 executing program 1: syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x64082) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r3, 0xf2b, 0x0, 0x0, {0x32}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5c, 0x2, [@TCA_RSVP_ACT={0x58, 0x6, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="0a6a3ab430c3"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x91b6183750286c8e}, 0x440c0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 205.125535] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 205.135656] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 205.150217] ubi0: background thread "ubi_bgt0d" started, PID 9323 [ 205.259674] ubi0: detaching mtd0 [ 205.305983] ubi0: mtd0 is detached 20:00:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000480)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x1a1800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) setrlimit(0x9, &(0x7f0000000040)) io_setup(0x1ff, &(0x7f00000002c0)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x76006e) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x13, 0x17, 0x1b0}) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000440)=0x800, 0x4) 20:00:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) [ 205.329932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 205.353158] ubi0: attaching mtd0 [ 205.366606] ubi0: scanning is finished 20:00:14 executing program 2: syz_open_dev$loop(0x0, 0x800000000000004, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x800) recvmmsg(r1, &(0x7f0000002240)=[{{&(0x7f0000000300)=@ax25={{0x3, @rose}, [@null, @netrom, @default, @null, @remote, @bcast, @netrom, @bcast]}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/91, 0x5b}, 0x1000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r1) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @local, @ipv4={[], [], @broadcast}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='io\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5c, 0x2, [@TCA_RSVP_ACT={0x58, 0x6, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) sendmmsg$inet6(r5, &(0x7f0000004340)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x1, @mcast1, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="7028c37e0429ac9d53ba9e83e982ea12995de241a2b8f6e6ad253a07ffa5d6b2a42d4d081fd234433e7f7c23dc50ff004b1e3e55c0fe04273133538e5e09e6fd9b828097fad460bff81be807fe0448c1911fe702c0e2fd05d1830f4d5bdcde1f19b838cf2deb6028a501bb50dda904d673a730e2735bbb", 0x77}, {&(0x7f0000000400)="ee3242d5888b831f77ba0d9c58c756cfd9bfa6982f1d0679d991ca5085c83c7011318d71298e226ac46ad7e65a238398332f1bb6e8022cd82d25000d7ba84158e1fdab82c34610bbeb9f7da7c4dc22cfd19448fa8bd1fa27a091d985a3de7d3b83a0819698ad0a315cf738c790784cb81f7a672ba9401ab6e80a24374432603eb568e9fe42087efaa8b85aafc5d2e7b055eb0ce53b380d5c12a1b9cbdab8ecc168dc", 0xa2}, {&(0x7f0000000640)="2cc90186d5699ca39f4772e2b8ea877f53887bc86c33dce64a7071e1ddbef94f53e36e6c5f6c0934103485920cf24419b3da2a34f84cbf725810682bad7800ddf8efbc2521b3f088ff24ba48919c0978c680a5a6d69511c20646eddfbe118b35796d7dfd74ceb008f10c5670f60c0026d08fc3bf8e0e9868bb58e9c4abcf985d888a59", 0x83}, {&(0x7f00000001c0)="9ffc5c3d33beea2078a2c20b1e5c3b0814a0246dcef0a493814c692b0060e82a9bc37a4c3d4c571b83b9c69b5a", 0x2d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="de9f1a55e3fdf82c1f76de96ecfda07ddd214321cfdf5df4aa78d4f2cdb8935ec5b2b040f69ca3cc3cd3eecb8ae3684dd0bb95e9299d124b5f688ab753", 0x3d}, {&(0x7f0000000700)="c8c06473f36d0393b884b6ed27c31003b0026339c5d24bcd8fb82d6c491650475135628cc18a999c8bfa332e69471f6f513da7e3cfcd446759f27086c48409a9cf112a0d7ebc8adb9ea83822f95dc613aeec153063127755d2fdc7daaad635245fc2483672bb1df4cdadc5a9ca550185c310bc0e118c8198acd3be72d2d73a245fe5cefff2fdc1530f5bba636e5860d740f0c3b01759efa8715c30bd2aa4cde04c811ac7fe98bc7b43ed8926693c4625281ecd4e9757c0115be3d444e6ccd91d3a6f8f2ca30f3de6131548493a0d6adc179e46b38401047206b1412e1bb43a108e0faeb44a5e", 0xe6}, {&(0x7f0000000800)="154fba4df03b2b91f5cd6728f9c87bf962d3fc473325c02fce6717ad70aece37fee6317b2f9365b85d085effc4682a34495e3b9005414b875183fad273dc7c2a86f0f5fdc1630866cb9c8e3602a55084951f6a739ca75d24ba26a525d84b3e0f124d204c966bb9ffbb1d1049b6c9e7ee3f6203fdb14a877b8b80a1b490dc79dba766647e491da80617acd0b5c64499bc39e0a29014c67267a0ceb65e646fef040c3fc7a7e20cbfb76cd71319a6d7eb8808a77ad6c668c902ee", 0xb9}], 0x3, &(0x7f00000008c0)=[@tclass={{0x14, 0x29, 0x43, 0x1ae2}}, @dstopts={{0x68, 0x29, 0x37, {0x5e, 0x9, [], [@calipso={0x7, 0x30, {0x2, 0xa, 0xff, 0x4, [0xffffffff, 0x855, 0xfffffffffffff13b, 0x7f, 0x5ec8]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}]}}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x32, 0x8, [], [@calipso={0x7, 0x10, {0x1, 0x2, 0x6, 0xf801, [0x4]}}, @ra={0x5, 0x2, 0x101}, @ra={0x5, 0x2, 0xd3c}, @calipso={0x7, 0x20, {0x2, 0x6, 0xd6, 0x148c, [0x401, 0x2c4, 0x5]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x40, 0x0, [@empty]}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x0, 0xa, [], [@calipso={0x7, 0x50, {0x3, 0x12, 0x40, 0x0, [0x4, 0x101, 0x2, 0x5, 0xfffffffffffffff9, 0x9, 0x0, 0xff, 0x6]}}, @pad1]}}}], 0x178}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a40)="8cdcd1e27a56cfa4827694c02aa1d79cd917b6171fcdd505651ba8956dbaf67a4e284a711490df5ebae50ee7c44defebf54644c1f542e604a97211cc42845c86fc38155c306e8c14c7ae5c6005913813cda5436472853800b5fcba129e0885f9583feee9402ec01388ac0eac1b87a0a1978629e98420a674a27facb126733b9adfbad29cb28cf90e591e1e512e1a39ae6484104a8637ed6169f738e241fbff7341122d1c7fbeb1dcf6219c44b9c7aeeabb", 0xb1}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000540)="70cb72eb368f890d123b5214a748217099a579b4ccd5c9cea350c15b68e87515f14264f770673f9ab57433c28c7bbb23", 0x30}, {&(0x7f0000000580)="c5e1ac3754", 0x5}, {&(0x7f0000001b00)="44e02a91102605732542ad585aae28331b0407d8c542ba7fa16008d006149f8b511466b195b7f23daa6703febbd7ec1bce4447810ab96d2066c0bbcd5dd5b4ff9d856b9ec6628a788bc67e9a3c72", 0x4e}], 0x5, &(0x7f0000001c00)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x84, 0x6, [], [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}, @enc_lim={0x4, 0x1, 0xff}, @hao={0xc9, 0x10, @empty}, @pad1, @ra={0x5, 0x2, 0x1e}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hoplimit_2292={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @rthdr={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x0, 0x5, 0x0, [@loopback, @private2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x37}, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}], 0x160}}, {{&(0x7f0000001d80)={0xa, 0x4e24, 0x7f, @local, 0x8}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000001dc0)="b102a0af3dd9c6cba7bc1990aa14b8ec623abb142f", 0x15}, {&(0x7f0000001e00)="7f9e03eb6b6df2627153998b2d2c94c761702d9c8b494f6994f84f3ad5c9c46f85b153a56c10979465f9514e99f86d33414b7099b3dab3f21633d7112d3a45cb6914bf4d4f00770b1684fe7c2c37c47031a23dc96ba16297a814d24121b8ce5bd16402b6d6f4aef7dee1299b08b125f08b25eaf68ff4b6067db01e79f70eb9d8e0e6462f2aa890a5e2db3f8cf17ffe5d667bbef3d6d35d1a91235df37d940d8e1c5b6894e3b5edd9844ebaab062e1c7c80e9b61600a3fd6436a0b077d96fb69277aeb800ef0d606eafc53dfe25ebb8899fdc97", 0xd3}], 0x3, &(0x7f0000001fc0)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdr={{0x48, 0x29, 0x39, {0xff, 0x6, 0x1, 0x60, 0x0, [@loopback, @mcast2, @mcast2]}}}, @rthdr={{0x28, 0x29, 0x39, {0x87, 0x2, 0x2, 0x3, 0x0, [@mcast1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x33, 0x3, [], [@hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0x6}]}}}], 0xf8}}, {{&(0x7f00000020c0)={0xa, 0x4e24, 0x6, @mcast1, 0x5}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000002100)="10c14bd35de17c11c2630fd56a05721c2c8ad5467131d0629127f885734889757d1f63f820c413f1fe36deae3d089b4988f5412f66d080650e944115", 0x3c}, {&(0x7f0000002140)="61aa74c72a0815d4e25f66c0c6166ba4ceebe473c01e11eaaac33f0563d9440e44e2062e4e8642c76d30", 0x2a}], 0x2, &(0x7f00000021c0)=[@tclass={{0x14, 0x29, 0x43, 0x7ff}}, @tclass={{0x14, 0x29, 0x43, 0x3}}], 0x30}}, {{&(0x7f0000002200)={0xa, 0x4e22, 0x7, @mcast2, 0x1a5f}, 0x1c, &(0x7f0000003500)=[{&(0x7f0000003280)="c2b06c5c7f30020b896d42e277073ad6a4f1b7a94fc6372d1b60f7fe87d902aba7df8e9c14dfc1458530777bb53738a26ec0c3d306844a756c78f1ac9003da9073c4cf58a49742870b0e7aeee5445e6496e8df6ec90f09bfa53a5eb357bfa4463a70c183171f6bfb1946b52480c398ca3ddb055898a38e249c2daa0ee42872fb07e78ce527e4420213c0d572657e9ddd6fd19e5d6529f2972522fe92d8de1118b233f58dd76083e83153a91933ddedee927e", 0xb2}, {&(0x7f0000003340)="994fe0b1ae580fde53c0a79f3c364f19adc87b8014656b1cd90168713c4a48ae1bf5e2432c45e670db8b1b018fa7fb95c8027a35a8ceafdd750b87defdb6abb61313b84ac54ad6a8ec588a0aa83967c108d6179251634a7d2dd721f24ea1eb5add977dca7d44163f91995e33976f4cb6dee39395b044adec605d506652e6bdb9905fabfb9b301a781a6ed852e69a328a98fcf92e6c67fe0cffb2a0cd72e9bb102e361e1e03e2e06a6dff08188cc70f73a61a60dd1d8aa72e2ec9a03cd4b6b8940c9cc501409a4314ab9d34e7fe83d4781a47da255311455a35a7534ae485e563c83fccbf35810240ba019bfc9978", 0xee}, {&(0x7f0000003440)="e9d1c603f1668a0ff1", 0x9}, {&(0x7f0000003480)="a0c3826deeeb9d69c45700fb7b", 0xd}, {&(0x7f00000034c0)="4fd8b0551becdfabda94209f9e940480b947", 0x12}], 0x5}}, {{&(0x7f0000003580)={0xa, 0x4e23, 0xff, @empty, 0x25e40d2f}, 0x1c, &(0x7f0000003740)=[{&(0x7f00000035c0)="f9cca6b0b73e431738d3b63aeeaf7e1bb94b54295d7fefab811cb483931f7d1bc627c89d2dfdf5323562a1974003394cae9ae3fa570f8b88f845c0e7e5755edc7dcc11d48a51dfc2d99215c0fe60e309454df12e66dd8d17f552069c1aabeeca28bae41d32d059f0f352b275503ace69eb133ac08c61e55ae8a543a3facf3517d6abd336c1d51c118130da717fcb71cb97565122f579bb4f7b", 0x99}, {&(0x7f0000003680)="f5aad28959c38fb3521600", 0xb}, {&(0x7f00000036c0)="c51a181a3c297da54f4adb392466469e1f9884dc0741069bc98e0b25b649262e552bbdfe90b8e3ee680831528e451a99c5b9f5bb6a", 0x35}, {&(0x7f0000003700)="79b71a89babebd939ba67c9066e02c547fd05ebbf7ec0034831e19780072d6cc6d399c551d8f9875a7f1b730527afa7db4d704615777f526c149b8ee786cb4", 0x3f}], 0x4, &(0x7f0000003780)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x1, 0xff, 0x0, [@mcast1]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x32, 0x3, [], [@ra, @ra={0x5, 0x2, 0x3}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0xc5, 0x6, [], [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x18, {0x2, 0x4, 0xff, 0x3ff, [0x10001, 0x6]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0xe}}]}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x80, 0x9, [], [@jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x40, {0x0, 0xe, 0x5, 0x3, [0xc0ee, 0xf2, 0x3, 0xfff, 0x8, 0x9, 0x200]}}, @ra={0x5, 0x2, 0x4}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x5e, 0xa, 0x1, 0xf9, 0x0, [@private2={0xfc, 0x2, [], 0x1}, @local, @loopback, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x1b8}}, {{&(0x7f0000003940)={0xa, 0x4e22, 0x7, @loopback, 0xa5d}, 0x1c, &(0x7f0000003d80)=[{&(0x7f0000003980)="23eb4f9fdd7efd1e50ffaa16a070569c025d74fdb946dd9f67ff5219370d2b66135e463a852df289f1315c83cf4970fa8e87ea25282f347ff33bafcdba3ffc9d4220422a580210a884f0357e3eac1de17cae7152d4efa5f1d938ce4cb3f8ca9f84fe273ca14301ea72706db3c816dd18ca4999864266fd7da5975effba6e4238e2c60834926a161683686edfcdaa3ef52dc66b4f50b101cde00cb2195692cd46c7891c54e2c428b65e7137c98b6b72d85c4ade4cc9e7dca8ae15d6d26df58b", 0xbf}, {&(0x7f0000003a40)="153ff73a52e85aa97c18c073d0a5f812185927525c32734f28f19fce8de49df04dc5590e8c6737996e5d5f59050dd476003036955e5818e6d9fd4b9286ce709c109d436a550dc54725", 0x49}, {&(0x7f0000003ac0)="e1ec515f7253692a107546ddae78872da26cdf3efac08b1bb2fbae6b94aadae837e8535005e6427adcc1154bec5a3ca9fc2c6d4068d7bfeb1ce322db89c21d1af2ec17f89dad60e1eb32bf431ad27d01ee31dc8eaf9c7b119f7b695d1885b69b6637f2010a415bccd31d9ec497b9f800676e5c223078461356ac12b3c9f5b52a386de46937c76ad89344c9", 0x8b}, {&(0x7f0000003b80)="61be08e85088da47eb058e8cafc53449054f2b576d3ebc4415bc1a96d4d5957bb5628a13c13639e058b6cdf39fd6cf7cbfb123e16733a5a8e5d1a118e84e0e272e731ffd54132920ccc03b7a76941c9354a8c139b26fa64b", 0x58}, {&(0x7f0000003c00)="4168a0d03fdc128c642619232c867e21ac227462220a795303f23db7f47d0d5fbfd8c754908ecfe8932672d2eb9372f2b5f6c35289125155a380295edd4739a2395e473f35322a8a4245c7098041a7f2c78e50b0caae6e14851eb190c1c7810fe74f84ee8be843d916d867977a2c5eff3c32695abb43d49ef18f508c68e258b0077abb765092e2017996383b8f6f4e55c54ffb47670369faf6f6464759a87a9349e7c1818335b2c87b8e26938fca7b811735fe12c0057e9f8596c2daae3791f668c57e12e741d0efb055947a5d8816a68c0741895d91927a545c5abc7c475633728bfdd68aea02e906", 0xe9}, {&(0x7f0000003d00)="3813fbe72480572ddbd26d684dc4c06379d2ce8e1b8629ad722522ef89c2cfc48910a74148b29f695cab4eeae9af0566ed146326cfc1f846cf1796a8d44c077caf2ecff5b96854e015045e74e0a53ecbf93eefa566051fb5f2579f35f394ceefb7ecd4a0d9d3cca5", 0x68}], 0x6, &(0x7f0000003e00)=[@dstopts={{0x1c8, 0x29, 0x37, {0x32, 0x35, [], [@generic={0x0, 0xfc, "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"}, @pad1, @ra={0x5, 0x2, 0x1ff}, @generic={0x6, 0x4c, "217f108a5875af372ec2d923cce08bdc679d8305bc55fe5d569d48364e7398f2ca096c6af4323e8ac1a78d66595126cdb2a6b245987bc40b101cd31b6125fd129ebbc00604f22485b31ac720"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x3f, 0x6, [0xd8, 0x0]}}, @generic={0x1, 0x40, "af71de871a3c2e95ab84219e1aeef045247f2184409806feeb59eff71dbde77b7d23e6e907a8d8283d7d9efef4026f014e92bd75aecbc3b40d3960eb7ab14d40"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @rthdrdstopts={{0xd8, 0x29, 0x37, {0x3c, 0x17, [], [@generic={0x5, 0xb6, "4557a7a5abb13889be07db642c14d755e2c27c1a5f096b41207f712ac35d67f5683535524d7bf170208a574831664995f045a893d82b8aa29bb727c42915831ec7a8e3ffb8cf9b044a64dec987e1e4060e19c5e0a2ee1e8484363e88529cd64544bc7d98091ac9df02946842743e19fef7e9be5fc29468311f8f9645522df2ffa07f4b51d4cfb423c456131330022407c1060abc63382faaa6e3699b4c02162ada226999123512a2b4c2010b4c3c26b60bc28d96f3fa"}, @jumbo={0xc2, 0x4, 0x10000}]}}}, @hopopts={{0x90, 0x29, 0x36, {0x33, 0xe, [], [@generic={0x8, 0x39, "6cfa9034eb31c0961d17fd80c227563bc42c40dbda0a5a8b47754fdd5c122ac9f6e0b7fdd318c57f5a85a8beb57431d8070d17ecd48ffec0bd"}, @calipso={0x7, 0x38, {0x3, 0xc, 0x7, 0x4, [0x7, 0x2, 0xfff, 0xfffffffffffffff8, 0x49a0000000000, 0x86]}}]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x0, 0xa, [], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @pad1, @enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x38, {0x3, 0xc, 0x1, 0x3, [0x2, 0x100, 0x100000001, 0x6, 0x2, 0x10001]}}]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x11, 0x10, 0x0, 0x4, 0x0, [@local, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private0, @private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x2a}, @remote]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xbd}}, @flowinfo={{0x14, 0x29, 0xb, 0x3ff}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x3a, 0xa, 0x0, 0x81, 0x0, [@empty, @mcast1, @dev={0xfe, 0x80, [], 0x13}, @rand_addr=' \x01\x00', @remote]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3b, 0x0, [], [@ra={0x5, 0x2, 0x7}]}}}], 0x508}}], 0x8, 0x20000060) 20:00:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37) 20:00:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) getdents(r3, &(0x7f0000000280)=""/209, 0xd1) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0xc7, 0x2, 0x0, "037cdcbd4992ff3f239a4822ce49d37b", "da65d6eeec9c29979dc5b3173947487b24bf5ad6010bacee0cea95520f5b9fc81203c4d00cf607aabc3b5f31328b61fe82ae8e86cd752945e9122844d1ead00cd8d4a37ea91b7347775d2bce8ca108d287530f87f2b2a56c9f91f3d85b830bb19084744658c768d60d23de51b8c6c740a33594b1b55b15a74d55c35bbf479416c9a21808e9183810bb1190e41927c232741980040d25f00355ceaaee9c5db25563f6f19ef1043c1089bc41e2f0871727f660"}, 0xc7, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in=@initdev}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xfffffd89) [ 205.518966] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 205.527207] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 205.542805] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 20:00:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) [ 205.564174] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 205.585425] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 205.609327] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 20:00:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) [ 205.651252] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 205.690397] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 20:00:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f00001a5000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) 20:00:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) [ 205.725847] ubi0: background thread "ubi_bgt0d" started, PID 9374 [ 205.738788] ubi0: detaching mtd0 [ 205.761467] ubi0: mtd0 is detached 20:00:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x5, 0x0, "659539a3773a6ee524d6b3b03bfb1fa0fa34114aa6eaff0c6009f367dca9b73c88cb0b6b2400f59488125afdcb371cca1272b160df5439e9cb80b47db606325d7a9eea5428d2e2719364a6b848d46921"}, 0xd8) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="2be3", 0x2}], 0x1}, 0x8800) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfacd1f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cced04e", 0xfdef}], 0x1) 20:00:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) 20:00:14 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004103) 20:00:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x2010, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:14 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) 20:00:15 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) keyctl$session_to_parent(0x12) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[], 0xa) close(r2) socket(0x10, 0x3, 0x6) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="400100001000ff070000000000000000e000000100000000ebffffff0d000000ff8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffff7f0000010000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160005"], 0x140}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 20:00:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x46, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300ecf32ef0f750b50f012a163066b9690200000f3266b99f0000400f3266654766b8004000000f23c80f21f866350800a0000f23f8b82b008ed80f01bd0050", 0x41}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000000)={{0x3, 0x0, @descriptor="3c78fb2afe9193be"}}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key(0x0, 0x0, &(0x7f0000000440)="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", 0xc1a, 0xfffffffffffffff9) 20:00:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004103) 20:00:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sendto$l2tp(r2, &(0x7f0000000000)="4f27d8f73e53396682c3f5a25eb20c589ad748303c0b2b28b1aca73584677d05861aab6067f42bf2266a63c5ebf24c4d83189d032a977ca99fce1ad07f1987586ca693420b2f844b8cec7c34fae4dee982", 0x51, 0x805, &(0x7f0000000080)={0x2, 0x0, @loopback, 0x4}, 0x10) 20:00:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x1}, 0x14}}, 0x24004040) 20:00:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$int_out(r1, 0x2, &(0x7f0000000200)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10000, 0x0) mmap$usbfs(&(0x7f0000020000/0x3000)=nil, 0x3000, 0x4, 0x2010, r3, 0x80000001) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x2, 0x0, 0x8], 0x4000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='veth0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:00:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004103) [ 206.195233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 20:00:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x30, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) fcntl$notify(r1, 0x402, 0x13) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000440)={0x7, 0x0, [{0x0, 0x0, 0x1, 0x6, 0x336263da}, {0x80000000, 0x2, 0x1, 0x8, 0xfffffe01}, {0x80000001, 0xe0, 0x4, 0xfffff028, 0x5e5eefdf}, {0x80000019, 0x0, 0x27fce63b, 0x6, 0x40}, {0x0, 0x7, 0x8001, 0x5, 0x4000000}, {0x80000005, 0x0, 0x80000001, 0x401, 0x3}, {0x2, 0x1, 0x72ec, 0x92, 0x7ff}]}) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0xb, 0x11, 0xe9}) [ 206.312080] *** Guest State *** [ 206.322427] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 20:00:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000001c0), &(0x7f0000000180)=0x8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x4, 0x9, &(0x7f0000000000)="a3cb1568915e402bb20b43f26c9ad5b53cd47634f71653fe52619149ff19ce4c9b279479692efc1b033b4b3b9055c62f5fa439b4f7180aa219c45139129b08354012f03504aa0ffbe253a5232434e40c9620ed3ee3e40c7f4b6585738fff423071726f0ca8f047339f9d567fa0084294c7743805bb8a9b42731e8b07"}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) 20:00:15 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 206.361948] CR4: actual=0x0000000000002050, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 20:00:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x8, 0x10}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) close(r3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xdd, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000)='threaded\x00', 0x248800) [ 206.412853] CR3 = 0x00000000fffbc000 [ 206.432921] RSP = 0x0000000000000f80 RIP = 0x000000000000000b 20:00:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) getsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x6) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000000)={0x0, 0x5, 0x101, 0x6, 0x200, 0x9, 0x40, 0x1d, 0x2f12, 0x8001, 0x6c0, 0x2}) [ 206.465242] RFLAGS=0x00000297 DR7 = 0x0000000000000400 [ 206.496286] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 206.537241] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 206.561179] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 20:00:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x46, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300ecf32ef0f750b50f012a163066b9690200000f3266b99f0000400f3266654766b8004000000f23c80f21f866350800a0000f23f8b82b008ed80f01bd0050", 0x41}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000000)={{0x3, 0x0, @descriptor="3c78fb2afe9193be"}}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key(0x0, 0x0, &(0x7f0000000440)="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", 0xc1a, 0xfffffffffffffff9) [ 206.561209] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 20:00:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f000036c000/0x3000)=nil, 0x3000}, 0x2}) 20:00:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) getsockopt$inet6_int(r2, 0x29, 0x24, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x6) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000000)={0x0, 0x5, 0x101, 0x6, 0x200, 0x9, 0x40, 0x1d, 0x2f12, 0x8001, 0x6c0, 0x2}) [ 206.561220] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 206.561233] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 206.561246] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 206.561622] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 206.561643] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 206.561652] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 206.561664] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 206.561671] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 206.561680] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 206.561686] Interruptibility = 00000001 ActivityState = 00000000 [ 206.561690] *** Host State *** [ 206.561698] RIP = 0xffffffff8116426f RSP = 0xffff8880491cf9d0 [ 206.561712] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 206.561721] FSBase=00007fddf88d4700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 206.561728] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 206.561738] CR0=0000000080050033 CR3=00000000a005d000 CR4=00000000001426e0 [ 206.561748] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 206.561756] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 206.561759] *** Control State *** [ 206.561765] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ea [ 206.561768] EntryControls=0000d1ff ExitControls=002fefff [ 206.561777] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 206.561782] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 20:00:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000000)) 20:00:15 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) mknod(&(0x7f0000000040)='./file1\x00', 0x1100, 0x0) [ 206.561787] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 206.561792] reason=80000021 qualification=0000000000000003 [ 206.561796] IDTVectoring: info=00000000 errcode=00000000 [ 206.561800] TSC Offset = 0xffffff8ebaf050dc [ 206.561806] EPT pointer = 0x000000009baf701e [ 206.561813] Virtual processor ID = 0x0001 [ 206.719339] *** Guest State *** [ 206.969750] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 207.005003] CR4: actual=0x0000000000002050, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 207.034123] CR3 = 0x00000000fffbc000 [ 207.057357] RSP = 0x0000000000000f80 RIP = 0x000000000000000b [ 207.075292] RFLAGS=0x00000297 DR7 = 0x0000000000000400 [ 207.093670] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 207.108758] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 207.120416] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 207.128787] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 20:00:16 executing program 3: socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_NAME(0xf, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000900000000000000000000000000001f00000006000000e80300003001000098000000000000008002000000000000500300005003000050030000500300005003000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280054544c00000000000000000000000000000000e9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004453435000000000000000000000000000000000000000000000000000000000000000000000e0000002ac1414aa00000000000000000000000000000000000000000000000065727370616e30000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000007000b80000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001677265300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800434845434b53554d0000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000001fa400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d00000000000000000000000000000000000000000006000484d41524b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006be943a40000000000000000000000000010000007a39000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000280)={0x9f0000, 0x91d, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x990afc, 0x20, [], @p_u32=&(0x7f0000000300)=0x9}}) connect$rds(r4, &(0x7f00000002c0)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000040)={0xbc, 0x40}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) getsockname(r3, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000180)=0x80) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 20:00:16 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x2c06c2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0xffffc000) syz_open_dev$usbfs(0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000380)={"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"}) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000d40)=ANY=[@ANYBLOB="00000005a24e3f4fb26b0c1add47acd1a771683fd5b84b7b91fe685791eb0ebb488507cb28cb63809cd18d7b08e24d42947b000db6d8f31f3a3c1d3569b04e2d8fea345bee6234e4414dcb42aa3f78aa6aebda8652de940514290c5734ad5a4114e1c8426b0ab7947a224bdf510dceed28faf6e85032", @ANYRES16=r2, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x8005}, 0x4) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="010000dc02bdc752b641aa235e532cf185df4a9460fe17b57d78de35aeb1dd2a6a12", @ANYRES16=r2, @ANYBLOB="010129bd7000fedbdf2504000000080002000200000008000200020000000800020002000000080002000200000008000100020000000800020002000000080001000100"/78], 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x800) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x82180, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r5, 0x0, "6a5bed", "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"}}, 0x110) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f0000000140)) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x76006e) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r6, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000029bd7000ffdbdf25050000000c00040081000000000000e20c0004008000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40440d0}, 0x4800) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x0, @loopback, 0x6}, r5}}, 0x30) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x14080) 20:00:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:16 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) write$6lowpan_control(r1, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:16 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r4, 0xf2b, 0x0, 0x0, {0x32}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x48, r4, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x34, 0x22, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x20}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x877}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r5, 0x0, 0x0) close(r5) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000002c0)=0x3) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="503761b3ec66e17759f95ba7bd82dec92a800ceae810413e6e7fea7f40d013eafdc2fe50faa786d45a7e92f47542def40d2d4590096f89d63428fb77763078e45f8dbe7c99ad84579e44696f29605ad8436584ad3b0a8317e1fa91b643a8cf37f18ca65f5bdcf387ac60791d6c6c52b1bf52b87af87b5530338374343fe5521af948c72000382175b1feecb7f93276f53e19e18032435256fcd87f2a3905fe8b9bdc5a086eb1c68ec7124e6ff6b37b575a784fa7525929b8da81e3ac72889e7c1ea1d5c8693394ed8d7895cb88563309af1a7de69d5bb639665a6d79814667eb4a45668b57a443f09137d7b52a798534175bb8a4394c0adf02901b11c1c68cc3d38593ad77"], 0x0, 0x0, 0x0}) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x10, 0x0, &(0x7f0000000740)=[@request_death], 0x0, 0x0, 0x0}) [ 207.156147] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 207.183667] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 207.223794] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 207.233160] binder: 9509:9515 unknown command -1285474480 [ 207.244496] ip_tables: iptables: counters copy to user failed while replacing table [ 207.256762] binder: 9509:9515 ioctl c0306201 20000200 returned -22 20:00:16 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000040)={0x10, 0x400, 0x1}) [ 207.273194] GDTR: limit=0x000007ff, base=0x0000000000001000 20:00:16 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 207.335748] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 207.352356] binder: 9509:9525 unknown command -1285474480 [ 207.359331] binder: 9509:9525 ioctl c0306201 20000200 returned -22 [ 207.365268] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 207.392490] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 207.454309] EFER = 0x0000000000000001 PAT = 0x0007040600070406 20:00:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x46, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300ecf32ef0f750b50f012a163066b9690200000f3266b99f0000400f3266654766b8004000000f23c80f21f866350800a0000f23f8b82b008ed80f01bd0050", 0x41}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000000)={{0x3, 0x0, @descriptor="3c78fb2afe9193be"}}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) add_key(0x0, 0x0, &(0x7f0000000440)="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", 0xc1a, 0xfffffffffffffff9) 20:00:16 executing program 2: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000002ac0)={0x100b, ""/4107}) 20:00:16 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x300, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000000)) [ 207.499642] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 207.499650] Interruptibility = 00000001 ActivityState = 00000000 [ 207.499654] *** Host State *** [ 207.499662] RIP = 0xffffffff8116426f RSP = 0xffff8880491ff9d0 [ 207.499678] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 207.499686] FSBase=00007fddf88d4700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 207.499694] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 20:00:16 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x7, 0x999caf}, {0x64, 0x8}]}, 0x14, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)={0x1, 'E'}, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) getsockopt$inet6_dccp_int(r2, 0x21, 0x10, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 207.499704] CR0=0000000080050033 CR3=000000009f92e000 CR4=00000000001426e0 [ 207.499714] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 207.499723] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 207.499726] *** Control State *** [ 207.499732] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ea [ 207.499736] EntryControls=0000d1ff ExitControls=002fefff [ 207.499745] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 207.499751] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 207.499756] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 207.499762] reason=80000021 qualification=0000000000000003 [ 207.499766] IDTVectoring: info=00000000 errcode=00000000 [ 207.499770] TSC Offset = 0xffffff8e7e2bb1fe [ 207.499776] EPT pointer = 0x00000000a965201e [ 207.499784] Virtual processor ID = 0x0001 [ 207.663645] ubi0: attaching mtd0 [ 207.664462] ubi0: scanning is finished [ 207.668231] *** Guest State *** 20:00:17 executing program 3: syz_mount_image$xfs(&(0x7f0000000240)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@barrier='barrier'}]}) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', '+\x00'}, &(0x7f0000000080)=""/230, 0xe6) 20:00:17 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101000, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000040)={0x7, 0x0, 0x2}) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='batadv_slave_0\x00', 0x10) 20:00:17 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) syz_mount_image$xfs(0x0, &(0x7f0000000100)='./bus\x00', 0x100000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000640)="264b2f1ddf22e82fd79da7b7d6db91cc7601f1861bb1c0a61519090a059b6ce73bc755035b47f16c3c13ff9bcb41a8450c3b8a179184520000000b1d800fc1ac819aa858adc638c2e20da23f703f41eea3d0cf437dd6128cd2295dc1851818d143cbff1ae2301a3abeb783813b1998346b3b8eef383bfd1b9755ec5c79aea75a71e1135335526b18a0d77b4de46ef0316a81ebebba9a9f98b6243d29acb312c9df91dbbcdb3c170f6dac", 0xaa, 0x5}, {&(0x7f0000000940)="29a4b6ff9a00000043b489693255bc123c71d2073a66fdd800d835b1fb5bd63ef874a67d3a92b38ad6b44ac1b5bd59417a67ea86a5b310ff703fa9433d3beab20e595064b76798b38d5d37853f00000000000800000000007f6f09ebac68138fcee8841bfea8370520e4263df5116812", 0x70, 0xd9}, {&(0x7f0000000580)="b31ef615acc84712720a80d486e284ec858c28bbc30ad8317ad6dec33553fd5f3427215438b53b4d84d57fd850e463372f9de5927d33b60f27f9cdd765f32b4682597aa176084dccd169300ecb1e6ddcf12b981d9fbc966cb88386be4b070dfef4c4bf0695a8bbcd495db398e8731da1b75328d5a511940a35f13e1b17a6afb5c4be", 0x82, 0x3ff}, {0x0, 0x0, 0x1}], 0x0, &(0x7f0000000940)=ANY=[]) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000500)) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000240)=r3) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000009c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) fdatasync(0xffffffffffffffff) syz_mount_image$bfs(&(0x7f00000001c0)='bfs\x00', &(0x7f0000000200)='./bus\x00', 0x8000, 0x4, &(0x7f00000008c0)=[{&(0x7f00000002c0)="bbf98481bdb46b5b0f4aac680e00cde669728199d1aec9efa547320e93d5d72b7948f5390da661690d6bc5c638a87d680efebcc29f842cd27438bc4e03fd0d8ca0e43f0f0b8da8ba345f89beed088688800aaaa1fb8ac8ba6a8950ccfb87f910851454d1b7276a032dd7148be19a51e8e44ab5c40ded5ba4fd14b8173f4e026d416b82d22c238fd6a04de65b3d8277628d729e34fbd9f693f6e4ef698460974ae9786e703ca2f25e91f9e1e721b1dabc596900af4f2b1b8fdcd2e9c7300e3ec76dfcaf2fb80899438ed955b734bb620c6d204ac421a1863b61702e896dd361", 0xdf, 0x7}, {&(0x7f0000000740)="d529c2bdc53bd0a44be72ef1ca264e6ccbc5542475459578eba39b40a7844d0f2dd5cecff59f1fce2db176b4b2d60b1eb1f0be1e706e7a526421c0ccc5f832af8c621138bbdffa6248b8ba18e65bb68e98a05d38065b1f25d77eeca5fc4603f6f06080c95a2b94803d0836a49ee0cfe05fb3b9d8a0d37faaf5978982f865b488b1df1365edb34e2e6d3168", 0x8b, 0x5}, {&(0x7f0000000800)="970fdf925a0c80b50e47d3ef12b7d25bbbaff58ca688bfabe27977aa8de7ef0a4e401c24aeb49d", 0x27, 0x3f}, {&(0x7f0000000840)="59abd346a77d2e7e5d7f8d44791451af57fcb97ed34241c8f6f1a65e90fcfda619442676b31c1dcf6cc3305d59713450c3c318e7e2fa5a1de33dea2cf98d41d8f66103535a7239c407f9f5b2c9b3ab78f01f18b4121b275c0f", 0x59, 0xfff}], 0x8002, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 20:00:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) getsockopt$inet6_dccp_int(r2, 0x21, 0x10, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 207.668240] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 207.668248] CR4: actual=0x0000000000002050, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 207.668252] CR3 = 0x00000000fffbc000 [ 207.668258] RSP = 0x0000000000000f80 RIP = 0x000000000000000b [ 207.668265] RFLAGS=0x00000297 DR7 = 0x0000000000000400 [ 207.668275] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 207.668282] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 207.668292] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 207.668302] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 207.668312] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 207.668324] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 207.668336] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 207.668345] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 207.668357] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 207.668365] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 207.668375] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 207.668382] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 207.668389] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 207.668395] Interruptibility = 00000001 ActivityState = 00000000 [ 207.668398] *** Host State *** [ 207.668405] RIP = 0xffffffff8116426f RSP = 0xffff888046e7f9d0 [ 207.668418] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 207.668426] FSBase=00007fddf88d4700 GSBase=ffff8880aed00000 TRBase=fffffe0000034000 [ 207.668433] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 207.668443] CR0=0000000080050033 CR3=000000009e2d3000 CR4=00000000001426e0 [ 207.668453] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff864018c0 [ 207.668460] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 207.668463] *** Control State *** [ 207.668468] PinBased=0000003f CPUBased=b699edfa SecondaryExec=000000ea [ 207.668473] EntryControls=0000d1ff ExitControls=002fefff [ 207.668481] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 207.668486] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 207.668499] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 207.668504] reason=80000021 qualification=0000000000000003 [ 207.668509] IDTVectoring: info=00000000 errcode=00000000 [ 207.668514] TSC Offset = 0xffffff8dfc8bd8c7 [ 207.668519] EPT pointer = 0x000000009f18e01e [ 207.668527] Virtual processor ID = 0x0001 [ 207.807774] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 207.815409] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 207.815417] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 207.815424] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 207.815430] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 207.815436] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 207.815443] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 207.815450] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 207.815457] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 207.821099] ubi0: background thread "ubi_bgt0d" started, PID 9557 [ 207.849539] ubi0: detaching mtd0 [ 207.851814] ubi0: mtd0 is detached [ 208.040687] ip_tables: iptables: counters copy to user failed while replacing table 20:00:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 208.187043] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 208.381189] XFS (loop3): barrier option is deprecated, ignoring. 20:00:17 executing program 1: socket$pptp(0x18, 0x1, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-monitor\x00', 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 208.694420] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted 20:00:17 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 208.848794] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted 20:00:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0x128, 0x128, 0x0, 0x0, 0x278, 0x290, 0x290, 0x278, 0x290, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast1, [], [], 'syzkaller1\x00', 'veth0_macvtap\x00', {}, {}, 0x73}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0x7}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'veth1_to_bridge\x00', 'bond_slave_0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@iprange={{0x68, 'iprange\x00'}, {@ipv6=@empty, @ipv4=@multicast1, @ipv4=@private, @ipv4=@remote}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) 20:00:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x1ed140, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10040, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x1e8, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@loopback, @multicast1, 0x0, 0xffffffff, 'sit0\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x1}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x140}}, @common=@ah={{0x30, 'ah\x00'}, {[0x5, 0x3f]}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x80000000, 0x8, 0x3, 0x1, 0x8, 0x3, 0x720, 0x2]}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x2, [0x6, 0x3, 0x4, 0x3, 0x4], 0x1, 0x1}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x8}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x1}, {0x1, 0x0, 0x6}, {0xffffffffffffffff, 0x1}, 0x9, 0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r2 = socket$inet6_udp(0xa, 0x2, 0x0) semop(0x0, &(0x7f0000000340)=[{0x0, 0xfff}, {0x3, 0x0, 0x1000}], 0x2) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r3 = inotify_init() inotify_rm_watch(r3, 0x0) fallocate(r3, 0x34, 0x7fff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) [ 209.170393] xt_l2tp: v2 doesn't support IP mode 20:00:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(0xffffffffffffffff, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r0, r1, 0x0, 0x800000080004103) 20:00:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000340)}, 0x6}, {{0x0, 0x0, 0x0}, 0x8001}, {{&(0x7f0000005f40)=@generic, 0x80, &(0x7f0000006000)}, 0x1}], 0x3, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x4000, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5c, 0x2, [@TCA_RSVP_ACT={0x58, 0x6, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x1, 0x6, @dev={[], 0x2c}}, 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0xb1000903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) 20:00:18 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x7fffffff, @empty, 0x5}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0xed, @ipv4={[], [], @multicast1}, 0x3}, @in6={0xa, 0x4e21, 0x8, @remote, 0x40}, @in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, [], 0x1}, 0x3ff80}], 0x80) fcntl$setpipe(r3, 0x407, 0x6) lgetxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)=""/134, 0x86) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0xf4d, 0x3}, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x4, 0x400000) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) dup3(r6, r5, 0x0) 20:00:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(0xffffffffffffffff, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r0, r1, 0x0, 0x800000080004103) [ 209.675595] audit: type=1400 audit(1592683218.571:25): avc: denied { sys_admin } for pid=9652 comm="syz-executor.3" capability=21 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 20:00:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x1ed140, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10040, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x328, 0xffffffff, 0x1e8, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@loopback, @multicast1, 0x0, 0xffffffff, 'sit0\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x1}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x140}}, @common=@ah={{0x30, 'ah\x00'}, {[0x5, 0x3f]}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x80000000, 0x8, 0x3, 0x1, 0x8, 0x3, 0x720, 0x2]}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x2, [0x6, 0x3, 0x4, 0x3, 0x4], 0x1, 0x1}}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x8}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x1}, {0x1, 0x0, 0x6}, {0xffffffffffffffff, 0x1}, 0x9, 0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r2 = socket$inet6_udp(0xa, 0x2, 0x0) semop(0x0, &(0x7f0000000340)=[{0x0, 0xfff}, {0x3, 0x0, 0x1000}], 0x2) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r3 = inotify_init() inotify_rm_watch(r3, 0x0) fallocate(r3, 0x34, 0x7fff, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 20:00:18 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(0xffffffffffffffff, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r0, r1, 0x0, 0x800000080004103) 20:00:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000340)}, 0x6}, {{0x0, 0x0, 0x0}, 0x8001}, {{&(0x7f0000005f40)=@generic, 0x80, &(0x7f0000006000)}, 0x1}], 0x3, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x4000, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5c, 0x2, [@TCA_RSVP_ACT={0x58, 0x6, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x1, 0x6, @dev={[], 0x2c}}, 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0xb1000903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) 20:00:19 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000340)}, 0x6}, {{0x0, 0x0, 0x0}, 0x8001}, {{&(0x7f0000005f40)=@generic, 0x80, &(0x7f0000006000)}, 0x1}], 0x3, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x4000, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f00000001c0)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5c, 0x2, [@TCA_RSVP_ACT={0x58, 0x6, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000002c0)={r5, 0x1, 0x6, @dev={[], 0x2c}}, 0x10) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0xb1000903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) 20:00:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) fstat(0xffffffffffffffff, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r0, r1, 0x0, 0x800000080004103) 20:00:19 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:19 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x7fffffff, @empty, 0x5}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0xed, @ipv4={[], [], @multicast1}, 0x3}, @in6={0xa, 0x4e21, 0x8, @remote, 0x40}, @in6={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, [], 0x1}, 0x3ff80}], 0x80) fcntl$setpipe(r3, 0x407, 0x6) lgetxattr(&(0x7f0000000100)='./bus\x00', &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)=""/134, 0x86) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0xf4d, 0x3}, 0x0) syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x4, 0x400000) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) dup3(r6, r5, 0x0) 20:00:19 executing program 2: r0 = getpid() sched_rr_get_interval(0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000041000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000000)="3e0f01ca650fae82009000000f01c90f439a02000000c744240000000000c7442402b46d0000c7442406000000000f011c2466b8e8000f00d00f2202b9800000c00f3235008000000f30660f38f8a90a0000003e0f07", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ(r4, 0xaea2, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @multicast}, 0x0, {0x2, 0x0, @loopback}, 'sit0\x00'}) 20:00:19 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/mice\x00', 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x1010, r0, 0xffffffffff5c5000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x8000000200010000, 0x7, 0x2000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000a000)=@canfd={{0x4}, 0x0, 0x0, 0x0, 0x0, "0000eeec53ec0000739c699f5ff986ca08990039576a7d5cb2bdac3ea80acf584ecb5f00004e2f9663a918fa1efd9b0b0000000000000000002000"}, 0x48}}, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000200)) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaeb, 0x0, @perf_config_ext={0x96}, 0x1001, 0x0, 0x4, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getresuid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffe3a, 0x1}], 0x100488, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000002c0)=0x1) 20:00:19 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:19 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r2 = accept(r1, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000100)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r4, 0xf2b, 0x0, 0x0, {0x32}}, 0x14}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x284e00, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r7, 0x80045700, &(0x7f0000000400)) fcntl$setpipe(r0, 0x407, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000000)={0x1, "185bfa03376568d0c9fb54e821394582bd9a1f6e0b25492669e76f9eaa534c04", 0x1, 0x5, 0x6, 0x1000000, 0x4}) r8 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r8, 0x0) 20:00:19 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:19 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:20 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x1c, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 20:00:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:20 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)={0x2, 0x80000000, 0x1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x620683, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) mmap$usbfs(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x110, r3, 0x5f) 20:00:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:20 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x1c, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 20:00:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x10400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = getpid() perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xb}}, r4, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:00:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:20 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:20 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:20 executing program 2: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x18088, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) 20:00:20 executing program 5: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) read$rfkill(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mlock2(&(0x7f0000700000/0x4000)=nil, 0x4000, 0x0) sendfile(r1, r2, 0x0, 0x100000080000000) write$P9_RREADDIR(r2, &(0x7f0000000100)={0xc5, 0x29, 0x1, {0x231, [{{0x80, 0x0, 0x8}, 0x8000, 0xa5, 0x7, './file0'}, {{0x10, 0x0, 0x5}, 0x5, 0x40, 0x7, './file0'}, {{0x10, 0x3, 0x8}, 0x80000001, 0x6, 0x7, './file0'}, {{0x40, 0x0, 0x7}, 0xfffffffffffffc00, 0x20, 0x7, './file0'}, {{0x1, 0x3, 0x6}, 0x4, 0x4, 0x7, './file0'}, {{0x80, 0x4, 0x8}, 0x7, 0x82, 0x7, './file0'}]}}, 0xc5) 20:00:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000080)="65f30f5f1b0f78cabaf80c66b85599038e660f3810494bfaf3f6787800eef30fc774e4f3afbad104b82a15efba2100ed0f78d567f30f08643e0f32", 0x17}], 0x5f, 0xc4, 0x0, 0xfffffffffffffe18) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x50000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:00:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:21 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:22 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00005db000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00006fa000/0x3000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) pipe(0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000240)='S', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000180)="0ab4", 0x2, 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r0, 0x7f) r1 = socket(0x22, 0x80000, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) ioctl$TUNSETLINK(r2, 0x400454cd, 0x101) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x81, 0x0) close(0xffffffffffffffff) fchdir(0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) 20:00:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$notify(r2, 0x402, 0x3a) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) 20:00:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) write(r0, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="000427bd7000fedbdf250f0000000c000280080002000100acae544781115d350200040002000400020008000100ffff000004000200080001000400000004000200080001000100000008000100030000002400038008000300fa9a0000080001000800000008000100050000000800030000000000340004801400078008000400fb09000008000200090000001c0007800800020001040000080001001d0000000800010017000000"], 0xb0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)={0x114, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000005}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x12000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xdd92}}, {0x14, 0x2, @in={0x2, 0x9, @multicast1}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x8080) [ 213.370106] ubi0: attaching mtd0 [ 213.384547] ubi0: scanning is finished [ 213.495431] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 213.527308] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 213.558787] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 213.566957] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 213.576020] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 213.583606] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 213.591470] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 20:00:22 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f00002c2000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x20214000) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x4}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) connect$ax25(r2, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r3, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000827bd7000fddbdf2501000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="04002abd7000fddbdf25020000000c000300dec405ffffffffff08000100000000002400078008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20050005}, 0x0) [ 213.601749] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 20:00:22 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x1b) shmat(0x0, &(0x7f0000db0000/0x1000)=nil, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x101, 0xffff, 0xffffffff, 0x2, 0x6, 0x200, 0x9}, 0x1c) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000140)=""/76) write$char_usb(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xeb7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$video(&(0x7f00000014c0)='/dev/video#\x00', 0x4, 0x231201) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, r0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x84) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000001c0)) ioctl$BLKPG(r3, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x0, 0x0}) 20:00:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 213.641060] ubi0: background thread "ubi_bgt0d" started, PID 9855 [ 213.641232] ubi: mtd0 is already attached to ubi0 20:00:22 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffc0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8800}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f930f3a8e4dbf01ffffffe6003357000200"/31]) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x1, 0x3, 0x5}}, 0x14) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r6}, 0x8) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) fstatfs(0xffffffffffffffff, &(0x7f0000000040)=""/11) 20:00:22 executing program 2: prlimit64(0x0, 0x1, &(0x7f00000001c0)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5c03}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000000b1400012b53aab6352bd8fbb2dcd221bd7000ffdbc1725ba619ecf6ce000008003f00040000000800210000006fffffffffffffff7400030001000000ff000103000000000a0003000200000008003f00000000000800030003000000d0354a338d5fe3be4dbb747b26a0729c8c"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) [ 213.773130] ubi0: detaching mtd0 [ 213.786684] md: invalid raid superblock magic on ram0 20:00:22 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000001, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:22 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r2, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="791a97ca3077fae1ec019a4545e5aa3fceef87595342b92ede1daceb7737bf3b4d116df49a8463cc642bf8e50b96bf2b58f605f6a0173bd305b532ad89e92d4b5abdb31931157e22c4288b019723905dd3a17a92185ded509c8912a6dc85b443468729d90f6a8477cc3ff377", 0x6c, 0x0, 0x0, 0x0) r3 = dup(r0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f00000000c0)={0x4000000c}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfe69}], 0x0, 0x0) [ 213.817120] md: ram0 does not have a valid v0.0 superblock, not importing! [ 213.829618] ubi0: mtd0 is detached [ 213.852516] md: md_import_device returned -22 20:00:22 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2f2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) getcwd(&(0x7f00000001c0)=""/117, 0x75) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x101) ptrace$setopts(0x4206, r3, 0x0, 0x0) 20:00:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:22 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="a1023aa6bc435b19ae7f9328373a8ab40a83875a473776b84d7953a3dc478bea96ca8b94d837e7a6bb0fbf09d3d48399911492a36f9609fc2beeee47e853f70bed6ca2bf12b5b8939f584d8e6e49678fe100e255685afe488feb876b0e4cf2a2b070acb9ea32ccc9a3731e37a86a29529bc64ac1f31f6c1fe6ece741c903072f18738f867c3cbc9fe288576a618594b7f88d142e9e40e855a7b76cb8df7c84e1e18d993307ca41b70101000000000000b153cdb180b96e22d6434ba1d4c6", @ANYRES16=r3, @ANYBLOB="95c00000000000000000010001590000000007410000004c00180000000075647000"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c001}, 0x20080) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x115, 0x70bd2d, 0xb3, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x400c080) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r5, 0x0) [ 213.964880] print_req_error: I/O error, dev loop3, sector 56 [ 214.163397] ptrace attach of "/root/syz-executor.1"[9910] was attempted by "/root/syz-executor.1"[9911] 20:00:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = gettid() r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x2f2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) getcwd(&(0x7f00000001c0)=""/117, 0x75) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x101) ptrace$setopts(0x4206, r3, 0x0, 0x0) 20:00:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:23 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000000)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf32(r3, &(0x7f0000000580)=ANY=[@ANYRES64], 0xfffffd6d) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000001c0)={0x0, 'ipvlan1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r6, 0xcc2, 0x2, [0xff, 0xa1]}, 0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r6, 0x8001, 0x800, 0x8, 0x7, 0x1}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={r7, 0x35f}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 214.650516] ptrace attach of "/root/syz-executor.1"[9932] was attempted by "/root/syz-executor.1"[9933] 20:00:23 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:23 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x2000) 20:00:23 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000000)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf32(r3, &(0x7f0000000580)=ANY=[@ANYRES64], 0xfffffd6d) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f00000001c0)={0x0, 'ipvlan1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r6}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r6, 0xcc2, 0x2, [0xff, 0xa1]}, 0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={r6, 0x8001, 0x800, 0x8, 0x7, 0x1}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={r7, 0x35f}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:23 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:23 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:23 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f00000001c0)={{0x2, 0x0, @identifier="8ee7eac679819f1563d99602eb3f912a"}, 0x1da, 0x0, [], "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"/474}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4008810) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xfffffffffffffe34, &(0x7f0000000480)={&(0x7f0000000400)={0xb8, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xa}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x81}, @ETHTOOL_A_LINKINFO_HEADER={0x74}]}, 0xfffffec2}, 0x1, 0x0, 0x0, 0x4004004}, 0x80040) ioctl$ASHMEM_GET_SIZE(r5, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_MARK_MASK={0x8}]}, 0x2c}}, 0x4000) 20:00:23 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x7, 0x5, &(0x7f0000000000)="34b4521be2eababf40e7bd8fd1edcd22818e3c9d3ba36df0d3e38d4b0c79db317a3c1e885f77c65477ce5b6245f8318bcbc002"}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 215.004971] ubi0: attaching mtd0 [ 215.015742] ubi0: scanning is finished 20:00:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x34, 0x0, 0xb, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0x7, 0x1, ':\x0e:'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x6, 0x1, ']\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRES32=r1, @ANYBLOB="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"/301, @ANYRES64], 0x8, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4f) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @local, @ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810296}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) 20:00:24 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x800, 0x4440c0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) 20:00:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:24 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 215.164598] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 215.193996] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 215.212553] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 215.227677] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 215.253331] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 215.260456] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 215.268974] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 215.280500] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 215.291566] ubi0: background thread "ubi_bgt0d" started, PID 9966 [ 215.298946] ubi0: detaching mtd0 [ 215.331569] ubi0: mtd0 is detached 20:00:24 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) recvfrom(r0, &(0x7f0000000040)=""/220, 0xdc, 0x0, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) clone(0x12900000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='nfs\x00', 0x1af2081, 0x0) [ 215.343023] ubi0: attaching mtd0 20:00:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000001040)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x90002, 0x0) read$dsp(r3, &(0x7f0000000040)=""/4096, 0x1000) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) close(r4) [ 215.343854] ubi0: scanning is finished 20:00:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 215.436656] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 215.452308] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 215.484194] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 215.500083] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 215.519184] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 20:00:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:24 executing program 1: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0x0) keyctl$instantiate(0xc, r1, &(0x7f00000000c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '\'@\\', 0x20, 0x100000001}, 0x30, 0x0) add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x225fb, r1) keyctl$get_keyring_id(0x0, r0, 0xffff) keyctl$instantiate(0xc, r0, &(0x7f0000000040)=@encrypted_load={'load ', 'default', 0x20, 'user:', '{!-+${', 0x20, 0xfffffffffffffff9, 0x20, [0x62, 0x33, 0x33]}, 0x32, 0x0) clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) exit(0x0) socket(0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, 0x0}, 0x0) 20:00:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa0, 0x4801) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x8000}, 0x4) fcntl$setpipe(r1, 0x407, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x20010, r0, 0xb8f71000) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x1000) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20000880) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000340)) getsockname$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000001c0)=0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) [ 215.541563] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 215.541573] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 215.541579] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 215.541606] ubi0: background thread "ubi_bgt0d" started, PID 9996 [ 215.541622] ubi0: detaching mtd0 [ 215.553138] ubi0: mtd0 is detached [ 215.553394] ubi0: attaching mtd0 [ 215.554200] ubi0: scanning is finished [ 215.662954] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 215.679194] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 20:00:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@delrng={0x10, 0x14, 0x1, 0x70bd25, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040810}, 0x80) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) timerfd_settime(r1, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x9}) 20:00:24 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000000)={0x150, 0x0, 0x2, [{0x0, 0x1ff, 0x4, 0x6, ':}]@'}, {0x3, 0x4, 0x3, 0x3, ',L\x97'}, {0x3, 0x3250, 0x5, 0x2, '--+{0'}, {0x5, 0x5, 0x1, 0x5, ')'}, {0x3, 0x400000, 0x2, 0x4, '[)'}, {0x4, 0x7, 0x4, 0x3be7, '%-,['}, {0x4, 0xef3b, 0x15, 0x93ee, '/dev/bus/usb/00#/00#\x00'}, {0x2, 0x5, 0x2, 0xda06, '\\)'}, {0x5, 0x8, 0x15, 0x0, '/dev/bus/usb/00#/00#\x00'}]}, 0x150) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x6e7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x9, 0x8, 0x0, 0x0, 0xb0}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000280)}], 0x1, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x10000021, 0x0, 0x3, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000240), &(0x7f00000002c0)=0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x8eb46, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x8) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fallocate(r2, 0x100000001, 0x0, 0x2811ffff) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x4) ftruncate(0xffffffffffffffff, 0x200004) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, 0x0, 0x0) [ 215.705461] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 215.705469] ubi0: VID header offset: 64 (aligned 64), data offset: 128 20:00:24 executing program 1: mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x10040, 0x0) mount(&(0x7f0000000300)=@filename='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='proc\x00', 0x800, &(0x7f0000000400)='/dev/ubi_ctrl\x00') pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x1f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vlan1\x00'}) dup(0xffffffffffffffff) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)="69cb0c746e893137d7bceb40d909f2ba822d3f9dcf573280ed31a329b4dd10bb6989958bc97d141afbd0ecd8f9e31241e0776fa5d8add3d98fc1d6407e5fca99c63a93c264fc9904ea397cc59042f507901139c5634d1f60240af8759b4c4ca827", 0x61, 0x6}], 0x2100404, &(0x7f0000000280)='/dev/ubi_ctrl\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r2}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r2, 0xcc2, 0x2, [0xff, 0xa1]}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000500)={r2, 0xb2d, 0x20}, &(0x7f0000000540)=0xc) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="66642c7253c03181985f", @ANYRESHEX=r0, @ANYBLOB="2c776f1d000000", @ANYRESHEX=r1]) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000480)=0x81) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x108488, 0x0) [ 215.705475] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 215.705482] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 215.705489] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 215.705496] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 20:00:24 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x36, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc030000", @ANYRES16=r4, @ANYBLOB="00012dbd7000fedbdf25120000001000028008000100ff7f0000040004004c000380080003000700000008000200000000000800010003000000080001001f000000080002000500000008000200080000000800030002000000080001000200000008000200800000003c0004802c0007800800010000000000080001000f0000000800020040000000080002001f00000008000300080000000c000780080001000c00000050000580070001006962000014000280080002000010000008000400e7bb00000c000280080004000010000008000100756470000c000280080001000c00000007000100696200000800010075647000"], 0xfc}, 0x1, 0x0, 0x0, 0x4000804}, 0x19) io_setup(0x1, &(0x7f00000004c0)=0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x9) io_submit(r5, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 215.705520] ubi0: background thread "ubi_bgt0d" started, PID 10024 20:00:24 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf250f0000000c000280080002000100acae544781115d350200040002000400020008000100ffff000004000200080001000400000004000200080001000100000008000100030000002400038008000300fa9a0000080001000800000008000100050000000800030000000000340004801400078008000400fb09000008000200090000001c0007800800020001040000080001001d0000000800010017000000"], 0xb0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000640)={0x114, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000005}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x52}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x12000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xdd92}}, {0x14, 0x2, @in={0x2, 0x9, @multicast1}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1ec, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x20, @local, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ec}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb896}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xaa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xed97}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4bf1}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x80}, 0x2000c880) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000440)=0x88000000, 0x4) r7 = accept4$rose(r6, &(0x7f0000000080)=@full={0xb, @remote, @netrom, 0x0, [@default, @bcast, @bcast, @remote, @netrom, @netrom]}, &(0x7f00000000c0)=0x40, 0x80800) ioctl$SIOCRSGL2CALL(r7, 0x89e5, &(0x7f0000000100)=@rose) 20:00:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000001700)=""/4096) r3 = socket(0x1e, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf32(r4, &(0x7f0000000580)=ANY=[@ANYRES64=r3], 0xfffffd6d) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000001c0)={0x0, 'ipvlan1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r5, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r7}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={r7, 0xcc2, 0x2, [0xff, 0xa1]}, 0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r7, &(0x7f0000000040)=0x4) [ 215.707370] ubi0: detaching mtd0 [ 215.715353] ubi0: mtd0 is detached [ 215.719678] ubi0: attaching mtd0 [ 215.720574] ubi0: scanning is finished [ 215.856202] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 20:00:24 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:24 executing program 1: mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) lseek(r0, 0x49c, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x1, 0x4}]}, 0xc, 0x0) getdents64(r0, 0x0, 0x0) close(r0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x0, 0x0) recvfrom$netrom(r1, &(0x7f00000001c0), 0x0, 0x2002, &(0x7f0000000200)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) 20:00:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb], 0x0, 0x205}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@xdp, &(0x7f00000001c0)=0x80, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000380)={'wg2\x00', 0x401, 0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:00:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r2, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x8084, &(0x7f0000319ff0)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000180)="dde20f100fc1c79a93edf7e95ad2a3ceb954bf7b28df4f7b25", 0x19, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x76006e) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x22, 0x6, 0x10) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x38}}, 0x10) 20:00:25 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800000020000491e, 0x800007c, 0xfffffffd, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 20:00:25 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xa3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e23, 0xdf7, @dev={0xfe, 0x80, [], 0x20}, 0x1ff}}, 0x1f, 0x1ff, 0x1, 0x8, 0x5, 0x8000, 0x8}, 0x9c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) [ 216.219122] kvm [10077]: vcpu0, guest rIP: 0x13c Hyper-V uhandled wrmsr: 0x40000024 data 0xfffffffe00000006 20:00:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0db6020a844727d24e230f0000000099bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e232e725839c97b910000", 0x48}], 0x100000000000000f) fchdir(r0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) r3 = getpid() sched_setattr(r3, &(0x7f0000000100)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x510, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8020001) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) 20:00:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:25 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) syz_open_dev$usbfs(0x0, 0x5, 0x321000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0xc4) 20:00:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:25 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) ioctl$int_out(r1, 0x5462, &(0x7f0000000040)) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) fcntl$addseals(r0, 0x409, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="09fb5056d8df39cf540012800b000100627269646765009c99134400029c0500190008000000060006"], 0x7c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 216.559497] ubi0: attaching mtd0 [ 216.598860] ubi0: scanning is finished 20:00:25 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa4, 0x301300) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xc3a8, 0x4139, 0x6, 0x100, 0x6, "9ba4035e6e7f59107493006f6efee58e527343"}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) mmap(&(0x7f00000a6000/0x3000)=nil, 0x3000, 0x3, 0x11, r3, 0x0) 20:00:25 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 216.742387] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 216.756778] audit: type=1804 audit(1592683225.652:26): pid=10114 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir102961313/syzkaller.JAU2Fl/63/file0/file0" dev="loop1" ino=9 res=1 [ 216.787231] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 20:00:25 executing program 1: socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000080)=0x1, 0x4) poll(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8}]}}}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x88}, 0x0) [ 216.819614] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 216.840847] ubi0: VID header offset: 64 (aligned 64), data offset: 128 20:00:25 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200200, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r6, 0x40186f40, 0x76006e) setsockopt(r6, 0x7, 0x7, &(0x7f0000000080)="add9da7d0fa2b009a5a93f1bedaf426687b3a3a885eba9d09395eae4ccb4fd25d0380d5d7fa5688a73801bd66b08797ea25152afb160d0abad59b6f7141e59c8a664b08c8422611d33a735820ce7ee25f74ab3eeb68a9daaebe4d083a8b6febfc5224c634df1f49f2363d7f0fc655d4a23b279d4c62ab6f70c62e7487ff1b273347bc60061278beaf23547f9bd253292a9c9f7fb9f23f4ff01005313480bb81b67c28ebcb26e1e063b3a962a4de713f0a5fb171bab704a5c9f71c57449ea55eeec9dc6a20d825160a36e1076e6f6dcb53a583519d0079f63853f6c5ebaf68da7c4a4c41a8ee0d874dc3429d72f3b227cf2d125", 0xf3) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @bcast, 0x7, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) [ 216.896757] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 216.922495] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 20:00:25 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x1be, 0x10142) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x30, r1, 0x0) 20:00:25 executing program 1: socket$nl_route(0x10, 0x3, 0x0) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000002c0)={0x2, 0x0, 0x7c33, 0x81, 0x2, "115abfa64df01701ee6e6819757709819de1c6"}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000180)=0x36, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @private=0xa010100}, 0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @l2tp, @vsock={0x28, 0x0, 0x2710}, @generic={0x1d, "158012527ed5cd1ca2e2b094652d"}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='batadv0\x00', 0xffff, 0x2, 0x3}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000180)=0x32, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) setsockopt$sock_linger(r1, 0x1, 0x35, &(0x7f0000000300)={0x1}, 0x8) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2009, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @dev}, &(0x7f0000000240)=0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00') [ 216.959730] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 216.995100] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 217.038379] ubi0: detaching mtd0 [ 217.038393] ubi0: background thread "ubi_bgt0d" started, PID 10132 [ 217.055968] ubi0: mtd0 is detached [ 217.072035] ubi0: attaching mtd0 [ 217.080067] ubi0: scanning is finished 20:00:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x101181) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x5e5f4b6a9b2158c4, "b6aab4bf67d5c5a5"}) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r0, 0x8004551a, &(0x7f0000000000)) [ 217.212500] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 217.236318] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 217.260141] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 217.272666] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 217.292930] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 20:00:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x7, 0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00002db000/0x2000)=nil, 0x2000}, 0x1}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x800) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) fcntl$setpipe(r5, 0x407, 0x0) getsockopt$inet_opts(r4, 0x0, 0xb, &(0x7f00000000c0)=""/66, &(0x7f0000000140)=0x42) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') [ 217.316478] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 217.352213] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 217.363799] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 217.381878] ubi0: background thread "ubi_bgt0d" started, PID 10167 [ 217.388886] ubi0: detaching mtd0 [ 217.422944] ubi0: mtd0 is detached 20:00:26 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000340)=[{0xd, 0x0, [0x200, 0x2ec9, 0x9, 0x3, 0x9a1, 0xff, 0x6, 0x100, 0x7ff, 0x4, 0x7, 0x5, 0x3, 0x8, 0x8, 0xfffffff8]}, {0x3e, 0x0, [0x8, 0x2, 0x100, 0x3d8, 0xf03, 0x10001, 0xf888, 0xcb0, 0x1, 0xa4b2, 0x3, 0x3ae, 0x4, 0xb3, 0x1bb, 0xa20]}, {0x11, 0x0, [0xfffffeff, 0x1000, 0x4, 0x401, 0xb68, 0x400, 0x1ff, 0x29a, 0x2, 0x10000, 0x400, 0x8, 0x3, 0x3ff, 0x4, 0xffff]}, {0x2, 0x0, [0x7, 0x3, 0x80, 0x4, 0xfffffffa, 0x2, 0x9, 0x0, 0x4, 0x401, 0xffff0001, 0x165, 0x0, 0x7, 0xff, 0x5]}, {0x9, 0x0, [0x5, 0xd412, 0x2, 0x7, 0x2, 0x7, 0x401, 0xfffffffe, 0xd3a5, 0x9, 0x80000000, 0x8, 0x7, 0xff, 0x7, 0x80]}, {0x23, 0x0, [0x7, 0x9, 0x6, 0x7, 0x1, 0x6b, 0x80000000, 0x3f, 0x6, 0x7fff, 0x8, 0xe783, 0x401, 0x2c7, 0x1ff, 0xf83]}, {0x30, 0x0, [0x8, 0x5, 0x6, 0x3, 0x4, 0x3, 0x800, 0x7, 0x200, 0x4, 0x18f1, 0xf7d7, 0x7, 0x3, 0x401, 0x70e]}, {0x5, 0x0, [0xffffff7f, 0xfb8, 0xffffffff, 0xffff8000, 0x8, 0x200, 0x7, 0x5, 0x560, 0x10001, 0x7f, 0xfffffffc, 0x4, 0x8, 0x7, 0x2a6]}, {0x0, 0x0, [0x10000, 0xfffffffb, 0x1f, 0x5, 0xfffffff9, 0x0, 0xffff, 0x2, 0x4, 0xdd, 0x8001, 0x0, 0x1000, 0xffb, 0x7, 0x2]}, {0x10, 0x0, [0x6, 0x1000, 0x3, 0x7, 0xfff, 0x800, 0x2, 0x9, 0x1, 0x1ff, 0xd609, 0x8343, 0x7, 0x198607a8, 0x7, 0x8]}], 0xffffffffffffffff, 0x1, 0x1, 0x2d0}}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0xf8, 0x3, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3f}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={[], [], @multicast1}}}}]}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x1000000000000000}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x80}]}}, @CTA_TUPLE_MASTER={0x28, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x300}]}, 0xf8}, 0x1, 0x0, 0x0, 0x24000040}, 0x24000000) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x81, 0x1ff]}, &(0x7f00000000c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@nogrpid='nogrpid'}]}) 20:00:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 217.636065] ubi0: attaching mtd0 [ 217.659842] ubi0: scanning is finished 20:00:26 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000001c0)={0x0, 'ipvlan1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x0, @remote, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="edb53c6788267a307d11dcccb1eeed17771bc930843d1693c657dfd31e177abc810ff1629d5fea23c8cbd357e02c0d958a4c5f77d31fb601d8293a6cdfdd5878643a8fe934c8dc5b68108ef108d90a7f22fc4836c353008375426b410c2621fd430589fa78a37a20affd34c19190f0e490c153ed2b29cf00cbf3f85c07e803c7b343d05e50273495ffcf1012e693d01ee98cc0af950ab3cfa63cd0e99cfb", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000ff00618295cc00"/26, @ANYRES32=r4], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r4, 0xcc2, 0x2, [0xff, 0xa1]}, 0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r4, 0x5, 0x0, 0x80000000, 0x1}, &(0x7f0000000240)=0x18) fcntl$setpipe(r1, 0x407, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x15, &(0x7f00000000c0)="c83900fa3116cc10afa80c59afced459514d36d14c", 0x93, 0x0, &(0x7f0000000100)="67f5acfc586528304bcfb3a5e1955395801394fb52a9edea01b1396c9516514dc5f96fe8a191d8ed7b593b9c2b958019076a5c06c0d9f678ecbaaac27df58c0cf5854f6fc9806c795d83d302715bcd7b0bf337c1db1c83f7c8d1d26593a92fc787e47ee97fb93d382fcec36a84fc29ab4fae3450477131e3421e25aa0fbc2c0208f277249cf9c56916b66e0e027325c3332612"}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r5, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x0, 0x604a40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0x11, r6, 0x0) 20:00:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) getsockopt$inet_int(r2, 0x0, 0x6d1f36c306e6ef6, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000080)={0x400000000000000, 0x1, 0x4, 0x8, 0x14}) [ 217.811181] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 217.818180] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 217.818468] XFS (loop3): Invalid superblock magic number [ 217.824715] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 217.824722] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 217.824728] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 217.824734] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 217.824742] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 217.824748] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 217.824850] ubi0: detaching mtd0 [ 217.894636] ubi0: background thread "ubi_bgt0d" started, PID 10212 20:00:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}, {{&(0x7f0000001600)=@x25, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)=""/191, 0xbf}, {&(0x7f0000000800)=""/235, 0xeb}, {&(0x7f0000000900)=""/237, 0xed}], 0x3, &(0x7f0000000a00)=""/105, 0x69}, 0x4ff}, {{&(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/44, 0x2c}, {&(0x7f0000000b40)=""/224, 0xe0}, {&(0x7f0000000c40)=""/180, 0xb4}, {0x0}], 0x4, &(0x7f0000000e80)=""/125, 0x7d}}, {{&(0x7f0000000f00)=@sco={0x1f, @none}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f80)=""/155, 0x9b}], 0x1}, 0xffffa0cf}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001180)=""/55, 0x37}, {&(0x7f0000001200)=""/56, 0x38}, {0x0}, {0x0}, {&(0x7f0000001280)=""/173, 0xad}], 0x5, &(0x7f00000013c0)=""/205, 0xcd}, 0x6}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000340)={0xef, 0x29, 0x2, {0xf8, [{{0x0, 0x2, 0x3}, 0x4, 0x4, 0x1, '.'}, {{0x0, 0x4, 0x5}, 0x0, 0xea, 0x5, './bus'}, {{0x1, 0x1, 0x6}, 0x4, 0x81, 0x5, './bus'}, {{0x0, 0x2, 0x2}, 0x100000001, 0xba, 0x5, './bus'}, {{0x40, 0x2, 0x8}, 0x1, 0x3, 0x5, './bus'}, {{0x48, 0x0, 0x4}, 0x2f, 0x9, 0x5, './bus'}, {{0x8, 0x1, 0x7}, 0x4, 0x5, 0x5, './bus'}, {{0x40, 0x2, 0x6}, 0x1, 0xa3, 0x5, './bus'}]}}, 0xef) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x2}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r5, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x20000000001aa1, 0x84080) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 217.981601] ubi0: mtd0 is detached 20:00:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}, {{&(0x7f0000001600)=@x25, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)=""/191, 0xbf}, {&(0x7f0000000800)=""/235, 0xeb}, {&(0x7f0000000900)=""/237, 0xed}], 0x3, &(0x7f0000000a00)=""/105, 0x69}, 0x4ff}, {{&(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/44, 0x2c}, {&(0x7f0000000b40)=""/224, 0xe0}, {&(0x7f0000000c40)=""/180, 0xb4}, {0x0}], 0x4, &(0x7f0000000e80)=""/125, 0x7d}}, {{&(0x7f0000000f00)=@sco={0x1f, @none}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f80)=""/155, 0x9b}], 0x1}, 0xffffa0cf}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001180)=""/55, 0x37}, {&(0x7f0000001200)=""/56, 0x38}, {0x0}, {0x0}, {&(0x7f0000001280)=""/173, 0xad}], 0x5, &(0x7f00000013c0)=""/205, 0xcd}, 0x6}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000340)={0xef, 0x29, 0x2, {0xf8, [{{0x0, 0x2, 0x3}, 0x4, 0x4, 0x1, '.'}, {{0x0, 0x4, 0x5}, 0x0, 0xea, 0x5, './bus'}, {{0x1, 0x1, 0x6}, 0x4, 0x81, 0x5, './bus'}, {{0x0, 0x2, 0x2}, 0x100000001, 0xba, 0x5, './bus'}, {{0x40, 0x2, 0x8}, 0x1, 0x3, 0x5, './bus'}, {{0x48, 0x0, 0x4}, 0x2f, 0x9, 0x5, './bus'}, {{0x8, 0x1, 0x7}, 0x4, 0x5, 0x5, './bus'}, {{0x40, 0x2, 0x6}, 0x1, 0xa3, 0x5, './bus'}]}}, 0xef) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x2}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r5, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:27 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)=[0x4, 0x1], &(0x7f0000000080), &(0x7f00000000c0)=[0x7f], 0x0, 0x6}) r2 = syz_open_dev$usbfs(0x0, 0x20000000000000, 0x197900) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:27 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 20:00:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=""/184, 0xb8}}, {{&(0x7f0000001600)=@x25, 0x80, &(0x7f0000000240)=[{&(0x7f0000000740)=""/191, 0xbf}, {&(0x7f0000000800)=""/235, 0xeb}, {&(0x7f0000000900)=""/237, 0xed}], 0x3, &(0x7f0000000a00)=""/105, 0x69}, 0x4ff}, {{&(0x7f0000000a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000b00)=""/44, 0x2c}, {&(0x7f0000000b40)=""/224, 0xe0}, {&(0x7f0000000c40)=""/180, 0xb4}, {0x0}], 0x4, &(0x7f0000000e80)=""/125, 0x7d}}, {{&(0x7f0000000f00)=@sco={0x1f, @none}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000f80)=""/155, 0x9b}], 0x1}, 0xffffa0cf}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001180)=""/55, 0x37}, {&(0x7f0000001200)=""/56, 0x38}, {0x0}, {0x0}, {&(0x7f0000001280)=""/173, 0xad}], 0x5, &(0x7f00000013c0)=""/205, 0xcd}, 0x6}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000340)={0xef, 0x29, 0x2, {0xf8, [{{0x0, 0x2, 0x3}, 0x4, 0x4, 0x1, '.'}, {{0x0, 0x4, 0x5}, 0x0, 0xea, 0x5, './bus'}, {{0x1, 0x1, 0x6}, 0x4, 0x81, 0x5, './bus'}, {{0x0, 0x2, 0x2}, 0x100000001, 0xba, 0x5, './bus'}, {{0x40, 0x2, 0x8}, 0x1, 0x3, 0x5, './bus'}, {{0x48, 0x0, 0x4}, 0x2f, 0x9, 0x5, './bus'}, {{0x8, 0x1, 0x7}, 0x4, 0x5, 0x5, './bus'}, {{0x40, 0x2, 0x6}, 0x1, 0xa3, 0x5, './bus'}]}}, 0xef) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x2}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r5, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f) 20:00:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:27 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:27 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x9, 0x0, 0x4, 0x59f, '\x00', 0x7f}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc, 0x11, r2, 0x0) 20:00:27 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x54}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84009000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r3, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x3}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9a}]}, 0x9c}, 0x1, 0x0, 0x0, 0x880}, 0x80) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) 20:00:27 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:28 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x6000, 0x3000, 0x9, 0x3, 0x4, 0x9, 0xff, 0x2, 0x74, 0x7, 0x7, 0xa3}, {0xd000, 0x5000, 0x0, 0xe3, 0x8, 0x80, 0xd2, 0x3e, 0x8, 0x9, 0x1, 0xfc}, {0x0, 0x3000, 0x4, 0xe0, 0xff, 0x6, 0x8, 0x8, 0x1, 0x9, 0x7, 0xe5}, {0x5000, 0x1, 0xd, 0x2, 0xb8, 0x8, 0x9b, 0x3f, 0x3, 0x6, 0x0, 0x1f}, {0x4000, 0x4000, 0x4, 0x0, 0xbc, 0x0, 0x4, 0x0, 0x3, 0x80, 0xff, 0x6}, {0x2, 0x2001, 0x0, 0x1f, 0x20, 0x98, 0x53, 0x4, 0x0, 0xff, 0x8, 0x8}, {0x2, 0xf000, 0xc, 0x9, 0x1, 0xe2, 0x5, 0x9, 0x13, 0xf9, 0x28, 0x9}, {0x2000, 0xf000, 0x10, 0x79, 0x2, 0x1, 0x1f, 0x6, 0x1, 0xd9, 0x20, 0x6}, {0xf000, 0x8}, {0xe004, 0x3}, 0x1, 0x0, 0x6000, 0x8, 0xa, 0x8001, 0x2, [0x41448465, 0xfffffffffffffa67, 0x8001, 0x8000]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:28 executing program 0: getpgrp(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x4c3800, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:28 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$RTC_UIE_ON(r3, 0x7003) r4 = add_key(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = request_key(0x0, &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0x0) keyctl$instantiate(0xc, r4, &(0x7f00000000c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '\'@\\', 0x20, 0x100000001}, 0x30, r5) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000f8a37280bce6e64027fbaabed677cd313986f692d476000000", @ANYRES32=r5, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000f777ed499b5f7516c07671030bad4cd1cbb645b057684e518e26a37ff6a1333b2ff916c5a045f04421be8a1289d99d81558241b9d187547079d3f3d7ac5e986d5705b4c503cd8b054744d9cb12a210fbd86633ca721410312a830ffbeb036085533388a9ad02922e34e1a2bfc2d0fdfd77894e1f2d4d"]) r6 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r6, 0x0) 20:00:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:28 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x9f0000, 0x3ff, 0x72, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x42161e3f0bd9582a, 0x1ff, [], @p_u32=&(0x7f0000000000)=0x6}}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000ffdbdf25040000002a00070073797374656d5f753a6f626a6563745f723a73656c696e75785f636f6e6669675f743a733000000008000500ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) 20:00:28 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x6, 0xfc, 0xff, 0x9, 0x0, 0x18, 0x2, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffc, 0xff}, 0x1000, 0xa4, 0x2, 0x1, 0x3f, 0x5c9}, r2, 0x7, r3, 0x2) r4 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r4, 0x0) 20:00:28 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:28 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:28 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:28 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = dup2(r1, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 20:00:28 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x20, &(0x7f0000000040)=0x4) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x6f8a4000) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000140)=0x7) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) r4 = accept$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) dup(r4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'veth0_vlan\x00'}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket$inet6(0xa, 0x803, 0x1) open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) syz_mount_image$minix(&(0x7f00000000c0)='minix\x00', &(0x7f0000000080)='./file0\x00', 0x200000000, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}, {&(0x7f0000000640)="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", 0x309, 0x34f9}], 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) socket(0x0, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000480)=ANY=[], 0x2e7) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f9, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff7f, 0x7fffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000480), 0xa198) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = memfd_create(&(0x7f0000000040)='dummy0\x00', 0x0) r4 = geteuid() fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="020000000000000008000000", @ANYBLOB="46b8fe7121f840d62fca29e22dac9402d128c38d423d77857ced6b034bfb4c36650230203a0969ed82cfff813b86e8468d8f75402244ad859080037aee65acbca6bad26f02bf72c76ea7863d385628c0b9d2bcccae2ad0b62dccce9b5736fa43d228d7aada70be65c0567f51c690b392e01361fa89b24db543260be0285eefd2da7820d87308f98ede26c08976a38adcc6a0d10e6123a49d0f9a473b4f81402149497a3022cdb2bcffd54a0d2ef6a0f9cf1fca57d24c9532756e6b14aaec0d92fe310dec94fc9dea3e29b851d2aa24d558eabe21297432dd8bbba7857e5dce391b4d2fc24941199dca4e9425f531d4d3"], 0x3c, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0xc000) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000500)={0x800, 0x4, 0x2, {0x2, @pix_mp={0x2, 0x2, 0x33524742, 0x2, 0x6, [{0x7, 0xffffffff}, {0x8001, 0x2dc}, {0x8, 0x6}, {0x1, 0x2cb}, {0x8}, {0x680, 0x8001}, {0xfffffff9, 0x7}, {0x1000, 0x7583}], 0x6, 0x20, 0x2, 0x0, 0x2}}, 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000007c0)=ANY=[@ANYBLOB="a404bff4", @ANYRES64], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x7}, 0x0) [ 219.996463] ip6_tables: ip6tables: counters copy to user failed while replacing table 20:00:28 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, 0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000ac0)={0x14, 0x13, 0xa, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)={0x28, r7, 0x1, 0x0, 0x0, {0x3, 0x0, 0x2644}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x28}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:29 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) fadvise64(r0, 0xc64, 0x64, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) socketpair(0x27, 0x80000, 0xff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0xaf, @local}, {0x6, @dev={[], 0xd}}, 0x50, {0x2, 0x4e22, @local}, 'gretap0\x00'}) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) [ 220.010166] audit: type=1800 audit(1592683228.913:27): pid=10369 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="file0" dev="sda1" ino=16065 res=0 [ 220.026998] MINIX-fs: mounting unchecked file system, running fsck is recommended 20:00:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x140, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$negate(0xd, r0, 0xfffffffffffffff7, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, {0xa, 0x1, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x89}, 0x20000004) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0x0) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000540)=""/4096) socket$nl_xfrm(0x10, 0x3, 0x6) 20:00:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:29 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x14040) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x10000000) prctl$PR_GET_SECUREBITS(0x1b) 20:00:29 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000012c0)=0x0, &(0x7f0000001300)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)=@getqdisc={0x44, 0x26, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r0, {0xffff, 0xffff}, {0xfff7}, {0xa, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:29 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:29 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) mmap$usbfs(&(0x7f0000225000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x480, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000240)=0x10008) r3 = syz_open_dev$usbfs(0x0, 0x10000001, 0x10b182) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40186f40, 0x76006e) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0xe9, "aec38d23b2cc0ac32e06d68bee6db3011dcee304d5edbbfc336210d03b36da74f8d867a46665a99a16c799efbe7cd9f8397e38173e50be4347d6feb12cd5233723b50be60d7da561dc882030f0e53f089e987cd9fac1085cada6169bfa345949b40dbec4c2855a2f1a460fe7dbfbd7fc53c6b770c92f63d60e64221a87a27c74a03d62438c4edd70c2c7b49fde78d068e403f03bf225c0b20a0e351cc2bef167ac62d4f13972a10412a1959c7a7c4c2f21a7175f974335a4074938e176f079cdf5fade8dfc2e1f3790c568c1ac9d46a37f9c99582cf9594c05001dfce4882720101780413b78a61e7b"}, &(0x7f00000001c0)=0x10d) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000000)={0x2d, 0x6, 0x0, {0x3, 0x1, 0x4, 0x0, ')){%'}}, 0x2d) 20:00:29 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140)={0x7, 0x3, 0x3, 0x1, 0x3, 0x1, 0x0, 0x0, 0x3, 0x7f, 0x1, 0x8, 0x3, 0x2}, 0xe) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80002, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000040)) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000580)={0x57, 0x1b, &(0x7f0000000180)="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"}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:29 executing program 0: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000cc}, 0x51) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5c, 0x2, [@TCA_RSVP_ACT={0x58, 0x6, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x9, 0x80}}]}, 0x24}}, 0x40) r7 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x8}, {0x3, 0x6}]}, 0x14, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r7, 0x0) r8 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r8, 0x0) 20:00:29 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0xc0b81, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$TIOCSIG(r0, 0x40045436, 0x3b) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000303000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) fcntl$getown(r1, 0x9) 20:00:29 executing program 1: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140)={0x7, 0x3, 0x3, 0x1, 0x3, 0x1, 0x0, 0x0, 0x3, 0x7f, 0x1, 0x8, 0x3, 0x2}, 0xe) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80002, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000040)) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000580)={0x57, 0x1b, &(0x7f0000000180)="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"}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:29 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x64004055) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) r3 = add_key(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = request_key(0x0, &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='\x00', 0x0) keyctl$instantiate(0xc, r3, &(0x7f00000000c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '\'@\\', 0x20, 0x100000001}, 0x30, r4) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', &(0x7f0000000180)) [ 220.901680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.968118] minix_free_inode: bit 1 already cleared 20:00:29 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x76006e) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x140e, 0x4a1c6a64ecb5c9d0, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x20}}, 0x8) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x8, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x50, r2, 0x0) 20:00:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x140, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x0) syz_open_procfs(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$negate(0xd, r0, 0xfffffffffffffff7, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, {0xa, 0x1, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r2}}, 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x89}, 0x20000004) r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0x0) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000540)=""/4096) socket$nl_xfrm(0x10, 0x3, 0x6) 20:00:30 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x980a, 0x1, {0x1, 0x2, 0xffffee05, 0x1, 0x400}, 0x4}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) 20:00:30 executing program 1: mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) 20:00:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000000)={{0x1, 0x0, @descriptor="c9f0e824bb070f8e"}}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:30 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x76006e) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x60, 0x10, 0x5, 0x1, 0x40, 0x81, &(0x7f0000000000)="60b6ca43ee0ba17f661ef2eab59a5ed8e4c676da7296eb89714335a9f7060e1128a683024c82aaa75622f9d44a22735dc5619f1fa406fc63921d6262b1254c27"}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:30 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) fcntl$setpipe(r1, 0x407, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000000)={0x5, 0x9}) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) 20:00:30 executing program 1: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x2b00, 0x0, 0x7e5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sockstat\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0x0, 0x800, &(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38f1efc1c7373415ea8c69905734c6c76bf16aad", @ANYRES64, @ANYBLOB="00000000ffffffff00002400000900010068667363000000000800"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00"/11, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a00010072737670360000005c0002005800060054000100090001006761637400000000280002800c0003000000000000000000180002000000000000000000000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0x8c}}, 0x0) connect$packet(r0, &(0x7f0000000280)={0x11, 0xc, r3, 0x1, 0x6, 0x6, @multicast}, 0x14) socket$packet(0x11, 0x0, 0x300) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa757037cc0ce7a00000100"/115, 0x73, 0x401c005, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000240)="994798a276d31f925eed7852f91de330", 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 20:00:30 executing program 4: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:30 executing program 0: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x150200, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r1, 0x0, 0x0) mmap(&(0x7f00003d7000/0x4000)=nil, 0x4000, 0x3000001, 0x11, r1, 0x64cee000) 20:00:30 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x15}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='[d::]:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000100)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) 20:00:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x14000, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x5) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe(&(0x7f0000000040)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000008, 0x0, 0x800, 0x0, 0x80, 0x0, 0x0, 0x5], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x18040, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x3ff, 0x2, 0x5, 0xf6, 0x0, 0x5, 0x1ff, 0x7, 0xfffffffffffffea7, 0x8, 0x48, 0x100000000, 0x3, 0xf0, 0x3], 0x6000, 0x2000}) 20:00:30 executing program 1: r0 = inotify_init() r1 = socket$packet(0x11, 0x2, 0x300) r2 = dup2(r1, r0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e224e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 20:00:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000000001aa1, 0x200) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) [ 221.972943] libceph: connect [d::]:6789 error -101 [ 221.973018] libceph: mon0 [d::]:6789 connect error [ 221.983080] ceph: No mds server is up or the cluster is laggy [ 222.057784] ubi0: attaching mtd0 [ 222.058600] ubi0: scanning is finished 20:00:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xb4e20edc54f8c753, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002f13836463db7323e3549f0408a0896ae84d4cb49d5c867e2e5ef5fd6d5cd4c26d4ccf6c5dada24c672bc2c9435d1d1b32ab02ca65395d82ccf706c6a5ca70e217bee4ba57f2cef3097d84dca72cfe076cc3f7f3ef1f15ee2a5300009c2df3b2437f40c3c5c44ce4a11ed77dab3a57b57fb52b"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x50}, 0x10}, 0x78) 20:00:31 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) syz_open_dev$usbfs(0x0, 0x0, 0x0) [ 222.197569] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 222.197578] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 222.197584] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 222.197592] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 222.197598] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 222.197605] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 222.197613] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 363127192 [ 222.197620] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 222.197657] ubi0: background thread "ubi_bgt0d" started, PID 10513 20:00:32 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/27, 0x1b}], 0x1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x20, 0x19, 0x17, &(0x7f0000000380)="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"}) 20:00:32 executing program 0: syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000000)={{0x0, @name="04bd05398e258bd49e3dff33e961b59248534800"}, 0x8, 0x200, 0x578}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200000a, 0x11, 0xffffffffffffffff, 0xdcaa5000) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000001c0)={0x4, "08ae1a20ac5ef0f0cef9f3935285d541744e10df41f4401ade14971d53995ab465ad4941171d481d7319db79d30e79a609311a801e310fc4759e999fb853bac4d429bc38000c4beb6cc876dfb82a5798acd54e9c7edb7cdf68e26b3b4edb2379addf7758241bf3ab270334a1ee6e3012e64ad93f392b22ea4ef9ebb55afcb97e5b65c51bc97c10da4f47ecdd022eb9d117ae866ca07be1bead3c440a36607f40f5d4f2dfc0127fc825898b5dac9309fc8bbd3f069133127e71231719a41cc7246b9b6dfef640bff9ae66be5cc0f162a6585c6106493dda9fbe6d6bfe9aa987ec8a4c90f46fa00f6e3f36567ca3104e9bc64c36145e2fd0cd585d5560767e943961a53d53ee456dafe0fe3036579a300c71853ce3bf5b1c05073f3fe11961dbcf5b7b23e34776d03fc193518a41e9f6a7c56dab95c257e9d9a936f631f4e67c5bbda8440f6fd3f2c126b544f4fbf4786a64683cd913036bef563ea962c9cb29db7bacb873a1a47656a2951900242f7c4366e6b2deec89adf8b2ce4c9182de684ea110e334aaa57ba65b3a65f1b75d9e0c712b00ccd8b6a1bc84afcbd2dc00dcf1411aad1423d5f0a72393c0ecae7c4b1cc2670bc3dac4b936c990a20a435017057218a924a220a08365bb98137a5de96280b9e0265617cc7af476abf0a4f4953bd464baf3bfa5562fb9b15336e2d74765ec778b306eaa1796e02aebaf94ee6b7e"}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x10001}) 20:00:32 executing program 1: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) pipe(&(0x7f0000000140)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0}, 0x20048004) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x616, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x88040, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x5, [0x7, 0x7ff, 0x7fffffff, 0x0, 0x265]}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00007, 0x4, 0x0, 0x0, 0x10000000002) [ 223.743327] ubi: mtd0 is already attached to ubi0 [ 223.760413] ubi0: detaching mtd0 [ 223.768481] mmap: syz-executor.1 (10535) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. [ 223.807324] ubi0: mtd0 is detached 20:00:32 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) r3 = socket(0x1e, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_elf32(r4, &(0x7f0000000580)=ANY=[@ANYRES64=r3], 0xfffffd6d) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000001c0)={0x0, 'ipvlan1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES64], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={r7, 0xcc1, 0x80000107}, 0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=r7, @ANYBLOB="dd00000052b65f47326a0d634292a9ed99b26e6989c560b57371430280d8bf20a2339eb1d8f6dc4cb2d6458bbbbee83759e30f331eb7da5b382d3271f273443edc16144328395bc9137128dda1a00710c81cef29ea696795cf731a5fd8e2f997f12653e5faae99b683eee7e6e515dce5a629100a0d1a92c3d36fc140053a23b800e1d520368138f98bf3d231d0d1a67553c4fa4e11c0fa62f0641b89f4e4b0e23ffe6eb0ebd84d654d57411bfb0833b94c39238d6a21f2fca544aa7c4c16bad6105aa704f4158f31586c70141c734dd28992d635bfbd44a4aff5c05058d8e64b361d4b77a6"], &(0x7f0000000100)=0xe5) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x1f, 0x860b, 0x4, 0x6, r8}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x9, 0x232041) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x101200) write$P9_RSETATTR(r1, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) 20:00:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) 20:00:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000040)) r2 = syz_open_dev$usbfs(0x0, 0x43, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffeffffffff, 0x2000) 20:00:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$inet_mreqn(r3, 0x0, 0x3, &(0x7f0000007580)={@broadcast, @broadcast, 0x0}, &(0x7f00000075c0)=0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5c, 0x2, [@TCA_RSVP_ACT={0x58, 0x6, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000009a80)=[{{&(0x7f0000000000)=@nfc_llcp={0x27, 0x1, 0x1, 0xd, 0x4, 0x6, "59e72c709e263f625ba655e0865617ebc2ba992b5e7edd94630c7b634fd8a1f6ad1241541f268df3f7d88ce6f6f1f57470be5cd494fc94b78928c8fbeb2d6e", 0x39}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="87fe211a87a073333395080d36101c2807c8caa2392a3701b72ead35836b3957bec4784edf6e030a486d0a99715aa2cb7de89802d9245ee57c6f77abb5f2564839f2697eed423db6059e5dcddaaf2e67d222bc004a6303cf4452aa4f0a8c2850fcdee09b33ae7c193c3556e7aaee047078f8db0b2faac1116f996a64fc60547f4085", 0x82}, {&(0x7f0000000180)="985277c3a6515bcf543d96a98a55ecad0d42b756b7f6cbe0be31c77ac7c2d2039d1aa26a6229370763a14fa017611bb7f254e1cdeaffd1a007b8aff91ee7e9bc8cb337e1d4e940725b690bbc3211d3fd4436be5fd086eb30c494dd20d50fddab4b09aac60d2d5c0fe4509dd678591808bdc03766093d9c2cb6836e80a8fd94d54c874bb805c0c5274cb942a3f4ad5bcdd6f61fab996fb8c6e26284c1ce4f3addef2b85e3e07b99f14458636f3cc2c17d27a7efbadd63bf0ad7166d27c43fd0b34974462e1470f78cc78d65ae1eb36910e5300b12dd3c23", 0xd7}, {&(0x7f0000000280)="c3b05e4260f4be97b0a18694b2295b82ddaf517ceaa71f99940896632e271fa42cc2c132936927ace793896cc031bb597b10422b8dcebe9294d36c62909b3b0bf9ba05bfce23b9afccfe560599bb4bb72d590734f21e988dc305b922b10107198e56f62af2ccc25bb2d06539d1212aa3999ae9", 0x73}, {&(0x7f0000000300)="517d36e6fc462b49eae07accd592ea3047cd0f2b", 0x14}], 0x5, &(0x7f00000003c0)=[{0x48, 0x10b, 0x8001, "436d5b95a429222025437b6751627ef8affe3427bcf78c357ff001e5c145ebae8a1a60661b07d30f5a8eb668f5f83474fd40fc"}], 0x48}}, {{&(0x7f0000000440)=@ethernet={0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)="d6d85326d83a4a59e4ad811e52bca48471668b", 0x13}], 0x1, &(0x7f0000000540)=[{0x78, 0x0, 0x9af9, "374a1563cf383a0a831963a01bea733346837a8c7a017b8b2bc04ede4fbb171d62b341a228a05b59aa29e101122fd588c9eb21155bc40cb8c80d29570a3522b38804936e79c018d00b75983330393d3fc9a2dd1c770509322689f31fa9a60f26e49cb40b39a2"}, {0xb0, 0x10a, 0x1, "0678928631015a9c8ed3ca4b3aca353175a9e41e7b7d104a66c840dc3857168087808a0421c140f873fe24c72147a91e9614de783a4965c99ec946966da562f84679c338865e3259a6444be3afcfd42f74a7855367dabe71747dcc83745ad3c284128f426c61b3ac2bb79345832c2d40c8085210359528ad85dbd55f4033e738767511c2b3fdb53fde8923aec10e93410c7543ecd9dfae2005876b617d476e94"}, {0x110, 0x3a, 0x14, "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"}, {0xd0, 0x11, 0x7fff, "791fff4476a006f98c07db86d0f1fdc63e30107a08c37a07ad0f8696c01f062be6077040a41d5625f05a406fe3135dbf29a9b30889ccbd860f69fa35565182eb5ced551864b7a35fe387a91c2d1ace3eda63248718b57a36cb79321fe96374a6e47df4b11c31cc8e311391d966489618c57d348f72cd7189dbae84f61f5f32e763d95744752ecbe67d09bdf4699db394cd220c839a5ea621dde1e7918acfa68815ce02ae205a2ca086beade2a45b01bbbd15b8c97ea44f7a52b266a8b72cbcec"}, {0x30, 0x3a, 0x6, "2b3f2e040126154e05f99e020456b701288d83f1b913d72bb81ad04f8ce71d"}, {0xf8, 0x1, 0xf673103, "f1b6183f3254955b0eac301672d83786e095a7e789f77241df73254bb6d8bc243226cdcfe3d8e12692efebb5eb4f6804aeefe586fca883d203e125e6f96353df64b83267b5b2d0ed3d6e49ae3a73ea4904f4a48974236062acf16deff8dd61c77710381c746177f6831d4519d42b480e63e327eff94167c85dc5677d8d96db969ec8deb2c9eb4c9dc1901baa42cab095744bc5ef71a9d18115b961da6dccea9e1f4916bc4a47a6fb8c8d95ece3ae151101f1488aa8dd9057cbd29d0931687fb7b7687403e01cf814c6263f5e2f30d25d4a76443d5761de77c5386b415173ddc7651531abac7abdc7"}, {0x70, 0x112, 0x8, "acd7ecfb689ee67bd4821aead008ab8e87e1f25ad7329bdd66284e70b9d769e2b5eb4d73c32274fcbc1fc1d6a2012684534ae6685b4797716e9f8698e7ca06c4a0724862a25387ac3f756e0b9123da8601401d97fcc1ed52f9"}], 0x4a0}}, {{&(0x7f0000000a00)=@nfc={0x27, 0x1, 0x1, 0x5}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="b94aa120dcccf0b26599e35b", 0xc}, {&(0x7f0000000ac0)="bfed665f3e35b32dbf2198a64fbc7269beaf184893ae6535a822abed0187f9094d96dc490cc66b4423340f8736a5dd46fb46c32bbddd030e7a3f24704a82a6f333e96415e5d5efb21d0598284bdd7a2468740c51373b48c64e2662340ee8cafa4d6928b311d9445aced1fca15c38f9fa3a5db694c5da9e8fafb67f3fc4456ed22615492e529514179291a29d3bada0403d62bba2f0b3b57d83a27516718f6a3b6a854e5b93f0b0962fa7f3bf342a1b495da37a30afbfd85293504972c4e145b09278ea6a825de676683d899d3d8208ec2df53a1cb52ab2655946bd987841a9a58c5eedb9af32614855eb791b", 0xec}], 0x2, &(0x7f0000000c00)=[{0xe8, 0x113, 0x6, "2e9ad3d942d54ff5032c8b80940218a78a21bd1681214dcf98cf8cf22d2169190e8a9c543fa1f9666733eb4c74d34c2f0c758a51baba60beff66ca867a0f1a7f971e598c2b4966ba1fa726d8ae4af20757a0ebe75bbbc36895615b98021a0987484da78b2e056a1da9dbd4aefca3c654e501f9d3d7c67dc339b5c574a1f4ef9d99829216a8fee96ce32f37aa7e3c79fc7ca11e5e0d5c2a1c6dbb45bae02a01fb41a6b49f2cf62ae91af3136dc350beafec222cceda036d1c877e6222b92f0fc55f79500aab6e59a0bf81f1f5e72a19a3072d11d8d913"}, {0xd0, 0x88, 0x2, "5e56595c972ee0d9285dd80331ff34804317c54406c98a98e6351f548d988996c5a451845aa0cebcea18617af127fcb6acd19cf95e9620355d5f7423f102a19e4072ecc4db219396323b23149f6c97d724a0ad77db40e116fd64f4d99f6db60a6291ab5381febb0968e5247665de657dcb90cb87f497562005c0c702a49ffc58a03bfc3f65487ab1cef4a0904c2fda2a1fef9d63fe98c41936f26e8314324be9ffd20380cce01314a082c18bdfe51823ac20b937f3eefa30300e"}, {0x98, 0x105, 0x10400000, "a01baa9247069369f19119515e9ef66c2b4fb68a9fe41220311598d451d6453a8f3c6614fee0c101d68904a5a9b6565347cb9477dad02346f15646ab3906a63c894771a6ff6e5dfc9106fdd86c4294ca4e8cb9ae82d7f65a8855ae423310e642c90f0423c8308985d87ba0a3fe71371ac7215344bb4cff1f967d3f0e299820c8e1d1"}, {0x100, 0x2a, 0x3ff, "2081cd4004b613273ae7c2a1837e099635f07410496eda8f535ab494179f6a0d5c438c594c91405c05bc47877a5e527e61b31713815be6cdb1b548e8b5bc44dc05f8fe2b4c223fe3576061575f8a24bd3a2c9f137a6a093c9bf965af4206ade5815aa919d756e69a60a1940e590dd3485bc96a2476dc1ba236b31a90533af52097836f087aca1a28f27ddf84e60bf408dc16988a8c0aae313155b2976354177e88ed128de58efec6070d73567242a4ffb371c8a7c2ecf7697172a14014119bbefd27c18735a83812dd775e6ef9232862581b5eba8e4864833f14e827aada8f83eaf943bdf32810af4b6de7c27a10"}], 0x350}}, {{&(0x7f0000000f80)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @local}, 0x1, 0x2, 0x1}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001000)="29bb9e7527c2851d734facb0af7e8928202038d2a1cb710cc348b9ab31d9195bb188a419663709bb1ff15c2e01f43dfd0774180b905ad937ba7f9c12c7d1f3f13e6b08a2a353f936867e4b70c098e9d1d9b8a676b4c473d79a6e340162a4d85dc5c8c369fc4fc7167b1088e5d226405bb0c46ee12b89a44570c93c286630561e554bfe2d3684d7425c9465001e6d541babfd2bba8934cf1006b93ba90048441731d72169dbb552bb11cb", 0xaa}, {&(0x7f00000012c0)="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", 0x1000}], 0x2, &(0x7f00000022c0)=[{0x1010, 0x104, 0x1, "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"}, {0x1010, 0x115, 0xfff, "58b4746087ce65e2bc8b0df8406d36bfc0482720571800ddcc94789f6981ff1cf3f3ebcbfc7c8136e13358b54da4f0516df993b4775219e9282b0b8aadbd02321e1ae72a32c99c8c1693dbf41b9057afce4c8ba0d6e30190c49171cb864c58a254ffe1c610201268a7fc7a3dddfa4804442971c2489f6913b2890315cfe1c6019136c951db864bb011e8953668604b9e60ae87913cb75aca06eab38acc9f386ec798410fe6421f947ef8424ac2e49f7c7e71b6cb4aff9d4c1e9d4da351ff576e0133221e28fd94a0050e4e33d32a06acda020ba6f4e122dd52e8a2b28a1a543a3d763c29d1a04d7e8dac003ea52aa6784c21066fdde4141131b84178d5ba1d3c29e817035b71eb634d1ed3064d8aacc2750ad468ef06a690679b629e55ec52a7c368db7bb4cfc04549f49cab099c858072bf09bf44b2c7fd7e913fe8768b0425a0dfd990387f286f1296809395ebf913fa3dca8178603f794eaec41a65e304c846bf2ca60e0176af43e8f5c36ec9f350d3c4cde2519590b762f2845efdd3333ddfdf20a7f9a6af6a7d608fccc848d4c37b84ad3811b00dbfaa4a54c6bb6986fab58853f97d329f31a0e0a487e129b1cf060b9922f1de07f517e37691fc632bad7c094e60505b4df876c9c2bde5e41a296933b044dc2f523620af4dfa1221fe66089fb75e160db95939fda89c8bea594f6205a374ddb46eba44f0a76d1ccdd2c6644b6e902130a7599dcc4be1b800248883b560ebc59f5ecf01463a776cc83f0e7cc640e24b3e5fc74455d7e4fe796b6cf2291e717555e9aa916282fc32a9689f4b0e2b9c2c5b64d69757954da6b524edcb6568680fcc1d4b2286f46519c4d151c86e9e524fdd43fb045ba604879ca2c4116edf83bf0ede4344bb885e456ee5e644be90ca5fd3cb71ebbba7d202ed25a136739397fa1290d79589ea3c8aca7bf2de62afe002ae3d2453853f705612195447402829dd7fc263c312ab2bd43acc06cee8d1aa420346aef19221548c446870d6edcb9600b96f008279df919face5ac5f32848cca27e0631eb6e5b55b5dc05e148f30f41571d8bf43ec88743bc45921e7a31589b6fd49ecb3863a6951bc4950381b16b98fbe7dc6f7ea6f9de1106e26bca6d388e95a3f64de507a0da173741a11876d35c46e1bb1afe60761ff53b4a9e32f53ef12c3d4765792a12826d922b4c0527d0881406c968fd9cf6b08c4f24ed6e269c4d9fa306b69f68c41f0c686465c9dd68d59f56eaa9667f9fcf0da44662dece994537f542838e06691fbcbee58a64d7dd57c26d04a032aa41e5d0713c5800f04cb172282a26e151c7f2883de7530a9e4274142278bd317a0a5535bdb5f1473e7372b532e054cb8d519f4c78aa0cb9bca223fd2bba9a176f01f27bf82484ff694c53daf23ed601246a7da737061300d6b963dd8e68bae737da01fe15875e66788ae26b5a3799fe873699eed93602c81c50667bef261d02a1837cd7d69c65a867b6715ddb7f390baa85581fb3ad7596deaafb83b9060132b4a8c2f9fd97dbac8e683437dc754af5883934b58a217af86a330a4807e1867fe00bdf6f8a087002fe29e38289a0962dbba886c2c4c750336cd2f6338ca31b2a46df90930d5030d9d7f22ccb8bdb2006d4cf8765c47368f4b5e5fe93d2ae58abbdd993b636a3a66d1eaa930e1fd68a199784ad382f4de2be8771398346ea528627b3644f9d5a6e4cffb3304843e2ce67a1b2841f620edcef3f7a6450a9772c1d4171b88daaecf5e5c652af60b44a6644948f30c4d61b8bce38e8fd7cd87b9764b4ed07255664ec4dfee6e447afd3a11eee3d4b338369fb60f91652de819668b4a1348a36bf36148fd2c080aad6de3f3f27ea47b36ed40b3261d7b2085dd396c6f4b470267a89a0adef9b5d7989faf17f9e1a6eaf0feee0debbdfcf51c3d0b4137cdbe57a5798abac40f5a2ded6d319fa26851793f49d8a217e8725db5ee92f4d2789b99da53091bd7beb789a39ca8822cb10e6c7e4be68a7ad34490e86a6c9907cf4b4b2b062a66e23b7122beb381772be303735e182b8de3d96bea9d788d417105810ec6d1cbc094ac510ec8a0d89bb5a46cfdca3f3243ba5d5529722fd593df760c02855c4edab7884b269932cf53276612e67632541cdb31e251c65548d10967a6fa1f12e1c7c0aea5b15a70f5cf93ca775350cb97f7a8072fb06c05d051b193362f8f984a139d46bdb95bee651e616407102e0bbffd13206bdbc6560e5ae311a664fd7e3d3748eb5a2b44723e4bb31726bb72c8d8a87575368dbe244d22949a01884266e5569699e3b19895dcf3b4a16cabea05a60c80cb7618204e3e5cb7d935cfe306a35f1d7efe5014a87e4c9c28f997d3b2ad76068677f21a04afd4ccb9e1ae45fc05af71fe17c1573d1ac51c9a1ba4ee42b5b10913e0f2a0d71b7f78e9d9fc13e5195a6f82129385a6db68fbf971ae5b3bd4018ec41089d8fa527c08afae9dd3ce4cd0c3dd290de6252f43e0d8ed694abcec9938177288507ebd8b31c1a27651b19825068561c34e2ef7e14a543b28effe3ec93fd347da20ff99584aca0e7029f7af66f3dc0cb3ee98eb4a6dd9d52d507c663e0a448cc751ceaf3a367cece1befd691b623d16771f6dbb58a2d71ef4c5b63a20c5d8c328b2fee8899a838a7b21c08db896e3b9b08bf8353b06684d3abfe21cf5e7fbc6cccafe212707fd45d79f4c4da33889d62486034230db5b556bbd23baca7d999f832e4d15ee98e42a603f6dbc8b6fbb5e1091c91ca8b673a3d1ad3409f16c6df333fe627e5192dbf2c01e78fd7ac16441cd5fd276bde7c9631946ec873043e2dfc782179bade097924c016557acc0454db426817c7f2e171b2ce8b959c6a3076d117853bf37122b23196f7522ced5a939303cd2f6e86f3434008f7c3e7cff726ffe3cdb6f68e6cc6301f9babed27691e10f7af89a4efcb7c7d9b05b3b6ac348067fe3c42ccbc179dc5b899e561ec7556a25f92121d7a049636313131a454c448eddcd683fc5c049d13e06a67efacf6a891d98a8cd7c5411d7db46b9b836c0c59426b65b4ae6cf3d98ddd20af5ba3ca4b522ba301d828c0e0d73e35f4961c4a4649c7b945e264282c053eafb5a03b5d8c5e3f66c99c806be9f9c2918153100a6491c34dfebb043b7fbe638938a9f8b501e8bc9db5633f2fe87dcc6c4857d45387c611c9e2e2e971d994620ea4ca5ae4132f370016438d6da2e66feaedb5d33373868b8d65649380fc66129ee69cac5bac9c44e9218dcd22ecf115b24262ce2b59cda0757516ed2483148e5a8d7aefe1105f4a517436b61587abf3dcebb4d97861bba09cd74a3fdaa549ba7fc2bfe47ed56eca513070ca3afe3261775388f3539ddbba4b7ac529843bfb414ac3921caae08dd0bc4498919fb71c13c4470bece1644a91c31001846638200d2f51fac13cc7983bfa1a6b7c0a46ae9593949fffec86b07f06a6a53ff78f0cb714d7aac9fdb1c840936ed01fd60768509241b20db780078e2dff6334b903ac15db7d0ac15ba57d414691bf21990f1bbc85488719b511ce88aea035d3038d627291468bd061b5c02655fce098aec89576adab4c93e4dc5604185effd1c013b6ed4ba3a4b189147ca31d47f0dbcdce1739532dfd537b8eec827cde4aab8c4efed8a599ee7902383fbad7e153938356277356dd91a90ded9880c40c52402f4a47b24947a7b92e43b413c854da2ba19d73c5400c3cf06b4ffcf3f644b1938c7c8529c3a440e396f691a8d9ba01b87cd434f31532939933aad45b87b2c30557cfd6b7bfb17e64fb026bfa2b780fdcf0e3c325b0d5fe3f4194b5d47ec6d67319dfff387b058105569ed652812410b9c63dc04df8b92c7f12db8e9ec48fbad4acf9f7d2b881feb8a65959920af5b4b45226b817a15ed9071a9e00d2f5e50ea2fb26ec4c5be0ec4165174d718a86c8f6b3dabb98673752c626bb8d797c385108b4a407352c4dd69a10331bbcddb4ef5bcbb9e6586eaec3af161ad7ca91d85c2c4b8c2190620d16b255544b7a47e00d6a93fa1b5b20fd7e41f0d85a099dbacac56d27b82628112875cc3d2498971799cff305ba22afff1adb3cb4cf31893cf85b2807b002bbdca888ad0794e6158411d4808d92477c26627c3d5497171df0a7264b91629f80801274b992f525cfce68e88d03b3a393748ae6d6b6a308d165a7ea723a9e42f870ca7d04b05f0704ef8111614c41769c03f8d493324921dd565da4e5c18f1b018ad5d76fa0bc4ae36d215a8bb90dbc19c46ed02cf0fb2ca21c7a1aec8233e769ac1015dea2c9faed516118f999bc7fe0ebe0c8c8258644183fb6c075c091d07011f14077eefc20e84c4837102cf49986ee5b8e2a27b149ac30f9a86f67cfb1c579601f54835c2e6c40f9f52b6738b6e8f916dbd423ecfa1a7db310e7f67cac91acdde007c10eaff68e53699df29e55c164a51d5212413cf786f959d3a9f2f5d644a0a3efb957ec897a08b6193f411320b9302417898a11b4503f9e137f5637d15aaf74a47d1f7f0871842a7c7314b96d122920624213b932221e8832d4c60cfb4b3db93a8ada7b5dab815987e60fde5f356135cd01a4555bb6831d8df666051adce79fdb34db22dbdf1eda891ac4944da524197233fc43fdb662891a6270cd6d982969e288fb1694a1e96b0ebfa7f4cd67db61aa847738b1c3d47ae8f8d2378561f13767ae88177838e98cfe460e8a89ac91042bf67dc0b0a310e52107ffbd2b7596f1d783b9cc3f50f54bcf277f7110ae807aad655652137af3e51c17b394a7c53a8be311956770e36476eba39ee3d3f462f49b854a7ae84797181d9527caa3a80ec5507dcf1ef1e6e2b503b9f2619499f3c6cec773e9b4e59654424adfb310476b957852f3c1f1c1cac3983eca77354faca04d0e76bd39d346f15234a93cca9597e56d86eaaad0cbe2019ded0765fc16267a6e09cc53a845f6b95147f8bbbb07ce1e3d51e7c9e96d9b039b103dd22b8d4924e4725bf91372f56a6bfbba45146029ddac6769bc1266aeff9cde160441f88f00208581cc7c4c9c6ba59cf2a06587e4e011f99b8c1842d545b72a6f6e3b8e468479b0c0556dd5edcf5e7d5110156f7400a4d841512dd1fdacae3ec419719a55c3f2d2a05be8a97bd1ce030ee91d30b45f2d776043b37483fd7ed8879480889e02a16965bda737a3ea377d740f05d544ead397a622c7208eb745023ebea8ff3628ed01b77b5feb8f522cd37bc7daf4b9584a2ae5d03abedac1cb8af1b8ac37233fb9554d1e3fb4d2b2ca14eb6c24033fa4614bbe7d3b9d4cd4e3f09a7a917fa2fa07aec3e231ca25b5ab90d2ddbaacca1623b5f645cda10c1fe8a26b2964fb2bd597b7739c2a190bbe72f1581f3cdb01fd91f3e1546aa7ad71dd70a517674d808c1fc020abde20fed1d452eb015f8fa1c98afaf0ef780d961451a57b41d5d6bda1e1c65ef7429b60633c2d3f8a4b231e11c944d3ac247ca076ea1301aeb53978e634912c4f17906b180f1f0c31a1aaf4384cede9450dc2147a8175f7cc50f8a26ee3a4a0220787ef7ce641001cf671cff5a13970dde680b4a22036080dab96e960e1515856d5d815afcf34cf5a244ff11dac96ddf6dc45375e79ac548c766b6f56bda08cf94b3e93e6d97f1f998de6c306415eccbdf1942bce6658f8bf6086f7cb39bbc696c4d2a55a7a1bcb4e129034f377d6bdb5c9148f397fadf26777be7388dd97afab2b54054e5ac8557b60c08094389b89655de4ec93ed4d788d5ee97b4f0c18a11b27a1990fa676bd7fad0f3"}, {0xe0, 0x103, 0x8, "edbb8e72775fa0fc3474ea9357eb6f75c4a513649a3e4fb03d9803854ddaefb736a0f5b179447f284153df71f29d71c629468260edf07155dae5d3ea5b68ff7f615235e2a30ab14cddeba6591aa3dba1784166d5435e8b4688f20c864ecdda6a755bf4b9b4d0639a6718eeeb3d450031f81461d6d1f978e4922b27638d384c3ee834e30f48a13f3e05cf2b6a058170551789561cd3aca9cde1df4307ddf3c12cf6113a0221be9646fb71c73f5a58e633bea57fe94a571db62efee8dc74389ea6cb8ca744d48c912053f421da"}, {0x20, 0x0, 0x7, "6cdb3c377ea5a0625c0d95c7101b2840"}, {0x80, 0x113, 0x1, "8c8b99c909e8dec9aba85eca874868cf040e14eef40094a8cc6ecacdb9d85de2d91b97383e18c1dc5b99d1c5a418eaf99b763b62165798ca27765aa51508c21ecdb794c361991e9f67579989ecc9bb49d07bbcf739f5b26d57e4a3b5fa488644ad12682ddcbfa261fcec"}, {0x90, 0x103, 0x0, "a8ab7767363d54009d3d6effa7ea95ecf7e8a1db36b544b4a26212ffb56e605dc2f6561ca06a3eb93e2eab4ffebe8c250e1c9a1f088b4d2a88b4944f66a6f99ae318e3ffbc85d4c2263cf7e1a11e2119a9de084f2f4aa47ae9943e7f3957e06532cbb46b465dce3492f2c12feb44e5665b8d3262e52d896e0586177ec3"}], 0x2230}}, {{&(0x7f0000001100)=@llc={0x1a, 0x4, 0x3, 0x0, 0x4, 0x1, @random="1881a239859c"}, 0x80, &(0x7f0000005780)=[{&(0x7f0000001180)="f5dcf0098bb8f03ef144371114a8cb5c15ac6f58c10092122077a69b56564c8705f9fe967ff32d486b209b2183becc39f4df4796f6568d825b1689e029780914a27cc322b4a7768dea68d6e21407fc20b8231473003b84df8c7dbcd7d6e67f3a11a1f1ad9b0c91f90290ceba40affdb4112c0c373d331f78eb6abe2d4ac713cdd4270adee8e573eda6dfb538a8c941770969be1b91638df20870d803f9c2f339ac66eea2c91b6a93c4323f", 0xab}, {&(0x7f0000001240)="6a4e8a603e378130b1957181bc81c2ccf48d754bd673fef6155133d0c5f75df317f87faa0d", 0x25}, {&(0x7f0000004500)="d0788c83246b2ab99c67679edf868fdc34526f36855d252713a925510bc505399181ad1ea09f8b53a3940eba93af857901cbf9563bca776ef089e39482bb9632fcc4ca83648b063682dfe3816d3e0f1ed654238c52e2d3d5fcece96106935d8f0f56886fc0337c1f506f446e4ad4228f1f966b39df34888743905d0a4bc831c9966b8d7f10a251ded4b5f81605ee8e9874c3f84e591870a7ab2352fc9b8c23d66ea8519b5bf5309b5512bdd34bd9efd1f681110a092584e450ff968f70db5aa5ddace2584d0c1d4c7f3bc08fae6c2df9916ab2abd1d5efdce925b5945ce7cf29deacb141daeb9a3d5ba7a28afe7ca681d79c2a5d79a4229d03aad129ed3985feab83b19192bc4e7994823738e83bc816d48e04b29140054ac227b59226941bde43da4b0a199d4125e4997ee77747bde6daafa2c6c87ea8db83ed3988a427ee05b358ac5e89077ee3b54e581826747cc51e40aa31def2bd681cb0695186f3568ee2640d9fd336ef9f078ccbb8560522bd7e97af2d894d97b6d524cf354f44eca431591c07b366499d33396d4d14d780210887afc590254b1c3aea62676fc7ef21aa953a9ee9b06fbc2fb11c51921a80511fdac9ecbcdeb3fdd449f2046a412f7d5451979bea339e8ef9f37b5ab22582d032c814b93b6214196c385fd403afa8b2d91de76e82a8bb6e16fbc7a642f7f46122e13c7ffb1b9b97f16cd4aec23bafc6f9c306e98bc36c366ad7d1dc08d51ff9eb526366c93b8690f19eebf553799f5609dcffddb68b03f9846e8ea335f0af8571070d8b2df0c2ab736ef9bd1ff9786e7c4c305f478b4b9d68f93910fca21d0357e6287256e6fb96db34f86535ed4b4c3dabc4ce9d08ac5ad0844e48d715d08ae0529a92fcf85e02492dddd67e5b3eb33e2bb650cd15a13a4ae4df62e4d5beee6f2aaf58d12bd5392617cdef08aa0a7de6d30b1450965bcdfc1d6bcfa67fe6c676cd218d81bd856ba8181322e4f0aa8fa8a8498a2038fe046d18b83dd88cd14f13bf8b77cf73bbe21f56fdc722e3ee183bc047255b8c41e8ce644f65c392471c75d16c4087f34f679269f7633366ce630a747d98742cb6f0aaaf401f88b10da5470bce100e0fa8bc35016641b7627afca6ceabb173e68706cbb12e9a62817330c1bb87d1b2a568ec1f3903eb8b05198e312249e777c72d1e5316f9f739c67a500aa6aaaa036a284e473a22264a82a1c9870877bb2ea4608f18126de1a1fd041fdb425e560fa3536e82851674dcf2f413642c5db4303e1e429bc815551d3c421963e1f27ece76f02428846c838ad3db71471c8838604f0e8a887e2ff464857028bd9004ea060dff777d656ff2c3fc0ec92a836df4c4705c8df774d1692807ad282758d6d3d7b7efd4283c4d0781c53002a830c63edd1810ee1b8ca4129ea205f6a0eb85d74ba6a97bd330ccbf2cb2b3f2b1b07056f0f6af7e18afba897eb3b7ed3dd4603977282a8a399cb4aa61b72f62f7dea6b943ad9da1b0b05b18673a32adc4bb87e61387fff33e2b8631490a344c4ea82a0a796e147fe7e6e045e280663c6f6ea14503135f1f8b27c5bb33e98c74141190356d70a0932618162bfb697b8c1cea6f41f7b534512e0408c05b40540dfcda1f14e2129cd7dd10294b648b78651b71b88aa4f3e992b19586344f96aabe6594403a091a13581d61946926a8d73258708fdf1f5be5eabf81e364e2afd1aed4825fa2f3b368d0fbcbae46089386ee1bc41669ed2273a6bad54a50c466baeb54dda8a3e978f239b8089f32dc40b3a02d5889976ab2523605e97cacbca920ebcaac00d56ea774a5993f00723e137829c0d33df213766158972bd19f7928436096875e8072762c97a3f1da8d37320742218255762cfe8fbdf8ad787efc55536e6d0be1e3735470ce588e9049c49127a91ebae9b1fdc8d6a6e8df4a13abb0e371b0ec071671b90309cecc474d6d418ed380e3219f45162dd6948c5ace8d7666215bc79be3277ebb00025c9e6a42ce7115c884abd2ba4affbb10e0fcb5507e19a98765593052d1123da8aa8dbffacae7b565103e43a432695a934087dfebc7715e3bd02bbd837febfdfd2d628462e6cfacf032d86e454621ea5512408a39fca7ea1b787946a80b650f6fcf2b688c077f1ecc465b771ad99d1abe258b2905b7b1fabdb691e9e7793ddab534dee0312cd1de7ccf9607e36e1ff20a0931c36e4cdca2ad2dc70163700359cc6994faa626516bb86c5b3638614a55d4f0f95b526835b073e7c1338f3cecab499cc01721014cf45af2e32c8a1dd044ff244ebcfc7783d95a8f11daa7ad47ef56a368c8c7639e204511267e3f9c443da68376a8059ca385b1279c654ce3b8dd87f0a5c108c0232adde3adaf6a2772fa2b898ee874761bc0bef38e2440cecae7a2f026de35b7ba891829aa5c43b1f19d646d66c1a9873ffbc6f545acb445c58f73a96c834866548e49aa112372b8d0190206eebec5b7f3cc871047bb81e11dfffb7f5ea516b161c35cd4031d39929d16a4f5047afe37c5e5b20c8065922d32bb7c538eb1d1dcea0a6a4c95b144cc64fd5c9899c09003dba660db7189ba4b3e1bbeb8503957f43bf867c397b524d616be2f17b959606112a548601044af2a9b025d7323d59c06096208fc7f2be5e173f294c6497cc041ed16a05ac851d4ffc26983ff968cd074a143ac978224500906df1a2842e1f10bc334a8a49299f46c33e72f8010aedb0cdfc408079ec863dca0b18bff6ea2175c2f9036bec62103dbf5cb88bbd252799b203a7ba7a48ced1675b3c6ec04d18f18286b761f401c1646bbc069acbad303375abfdee8948ac2e11b5a1ccd78f9faae88af55e58d39a12eb8d376a070308d37ccbc5032e20105809d2edff734af23305be928b60455ef4ccf46c132b5ff44e5ec2af6f0502597fb88c5fc04327979433b25da960a19302fca612abf1dfca75fb0cbd8394ab6cfdc35942dfe438935fedf5770e0093fc089e5868e5a7f4560e07fdfeba4d72a1e4c455a27e99d288d4e01c6199ae566a523bc282673a67ba9921f69e53661abbff3f1cd72b4c304d9ac174e707499e5955463d348af22e90842767ba103dacbfb3ec208d728dc631610bc53acc93a2d055087ea4d4b1690a46450898319eb513ed31ff5efd678cfcafd747ac98c824c393505cb562eb5cb352d396e7c9d9e7fb85a846143e054c070a6bd0be77a4de06e7abea24ac18f80ba1dd965920394f8601428e35c0489e5a7a8f78bafdf5723d0d0683f1e05d56966ddb97412d2124707e0e934b427f35e8683e1b3203b9c046b5d8bfb6f68877bdfcdd184cfebb97dd10149cc67187de3b39b2b37db20f4cb98ecdb30138ca3593b97c13c2b74fd43d15e9f8a7b92d47e7c26c631eb6c096a575008c1adb69b6e0577586b13ae4b2a32092019c1c033367e84387f4557bf1bf7fd0faf86c2ee1af915a47f110729bdbbac1393ea0109824a1be7bedcb14889f59741207bfbfe786a2073c54f2bf5200f79421bb097c7d7d1917af0e44b6abf50013da2f4866348436b4021124bb1d256401420f39910a6d6f862e1120f3792ecec41b3e1548e30cc506bc5138543b1bc0e2b49a2b963a6dce9ae0f24592498d356dfb19f2f570381c7e27232546c453945832e2c23d764828f48309453ee298ec2a053e06ffbf695e043c09cb4c65ee686b7a7c9e762812a687c276a5d245bab89d5bf6dd8480a1a80577c6abe21fa4c351abb27473bc6899780e9f22fcaed8fa0a560bc309219636950bc223c91a165e01605c6e02f14b2409c32021dc77c5afd6b4bd8dfbddb962e5011b98f0d8ff72d923cadc94c2418d86d155f1b46ea47a132a1ee69476a63cafad262b4db66d63bf1690a19238bc66be68d6035919a43cca2698f56127169f0fb602645f72ab341ceb057b88a3df55bbab095ab314627ba135cd0158319e84d7404e5ecda32d1aef419dbbeb7a54089a3188f4db3490244f87995b949070a2d7332280faa636bf34bcf8817fe2100f642acffb4a1a67a3f11da5de1ee0d92bbfdc5cd32d3a6831224e434342f6b9d53ec2a3ae99535d9a429016958681d9f03ce0f2afe558470d46d31c4f6beefb3120b075cc1e1f1cab47539c1fdb1a1a4430c93bc0577d1cd79d45988b08e189c451d71f8be41fcfef0db856e4d5b0fe284c56c1dbb9b987ea3c9d36355c27076c2662b31ad5aa67bd35da5c9512388bbda1499895d5f1849e62bad33c2e7c4902afbe53e6c1e33b6dffd9f1fa58828031ed6fa3bac5fc4a464e5632ac38d91f6a27040b7e661ee27c2f0547345d2845399daccb8bf69ecf23a4efd5eda98cd34cf0b50b52d75d0ca13cf7014da3621c5b44ff243846ec2c24460a9115d901b99851d587d93cefa64a9964055ec60428d401854f8b087f8e68e6005746e87c505f59d0fd404c5bf92c5c60638c265fcbb0919ffb07e9b524305eeccbbcdff45074e13f2694f9729db4f850c611cfa40b796843e5cc8061a374ee3a15c98623331ed73a0e6ab2e05946ecdb4c883a724f9df05b925bf1d2783b698a46dd1cf85775fab2fc942174622536337acac60ddf1ce3fd0e953a8a7dc968e85ed0418ad203cc407c9534aeeb8ee47e8ddc5db4b2de1e61e22d00d8313cce4c37f4eba3a699f50d9170328bac10fafbd43e79e24bf46b329d0c575591cbaff9e1ec069eb5dc0af3ae7ffa9b08e24db3c66a544fc972ea26e0490934c0bbc7cd9893865fd8dac41af28d51fb18e64aeef0023cefa0b95e6449e75bd823c3259edf8e029559d47f1ae0029f6afb3f9eb311bf7886f1279f982fcaf37976e87dfa2c4f068a6855e21a84d63c79d963c7f838505d50a727b803b0113b2031d271f0d245f3dfa37f94284f3fe6e815a492841824ba5f5ee2eb341d2b951b218b85301e9f8ef4477e50a40a3baf4f7cbadb701fdd6ee6e89456ed52e1fc7871a9084282d6a9c13effdd69b92ca45725c51d04f839ea6bcf02ccf800c402518688d48cf986bde78904a52dfdc63cd0c74ee525211da5d9cbf2e0c6e94b39ca65d8be31313055815e62672e5d72b6cf12c795fc8ef414825c5725a39974717f297b9d20ffe4e6ad5269314e1da22c44a2b095b9b7e1161691c63a67d5c889ac41674c8d8b28eb5c49c7cd59e2bff64e5442c87cd33ca647dee7814a96d6a16e9ea01f7490bb3c4bd3f1ecaafaf727f01aa3df7f47cfb122e5ad451642dbb258ae2f6e590e016206e8f90d3fdcfd00e17acb36774f984a1cb3a4f4e3a347bf6550fbb4e9cb00a11abeb8b3e88459779e478dfbe8bc34ef4aa4d91e5babe3e0c38fcb97973cffc1cf6bc9c38d724c548a2d7a09ce54427ab53a9743b326499e57cc03ff22de8e6d1d7aa64ccb62b3a46ba87354211533f90d7589504789ffa8a50c20d93c024e060d5fb6a5dd5b0abfabffac1c28fbf73e349e325f65c387fd24888baff4ccc08ef68618a79238ce235cfe1dfa1afd5da9998b70db136b2e8a6d7160fccdbea394cca096c3cbe8184425bd4c6310bc050b2750b50a6a663a159809f43cba58d9db6c13e9eb2fba8171aa40dc53d5eef50b05cece28cce4043be8bbe2716802de2f89fda9c84793a4d6db4ef90e5e6b4ae112c0376d571738c524a4906a1605423d93f132cfd4f642a2aaa4efbec6993387a2325e50e3a377d2ee76b5781837c2cf47a096e39321e86dca2757c3dff78a4068f713dd839ebd7c866c9f6aec1458222e24decf82e31d21a40c6e98075788ddbc0065da59e707ded5f72da362c09428408bd62d5a7", 0x1000}, {&(0x7f0000005500)="56fe7a0f9196134fea1b6a408bf57733154f7feaf0fa5b87d247bac088267df22e99590a83eb73c4e094310b8563b2fb9e5d29af3a1bb4532ae309ec8e9a7ff41bc66962ddb648d50bf915dbd1711d2ba0e7b7d945111865989b7d357ed1d09386fafe0cbbe7d5c37b3498d74a43bf09b25ddfd53cac5a25d6f000c466f1048de99419c395928e4b14038119e001d4118328b76997746973ada8d9140071d7719777d1d3d52bb9a0c8b727d56ab97a1414ab4545f81d58f5b941ef94beacb67ed925634cfd7e8e5a4f4e5bd367ed4411be995a0c1d169812961f453aa80af9ee7419316ba846e74d5c319b262ca9282829", 0xf1}, {&(0x7f0000005600)="307f8a39c74c44e6eb36ea62653e3166fa7bfdedd299a21d94e53fccee1078edde8eb2090c87534265503e1a0ab5ec652e18a5af304782ed25210cfab36e8c86f269bd4a6f4460e837c0aa6c83d39f3a027aab8babbfe7828c8825d0b6285a2987be161ed17556eb8c7d6bdc2661a94699b8f46249be91d96efea4181b41fa4bd9c3d63e24", 0x85}, {&(0x7f00000056c0)="642c788feb91ff8fab1746f2dde4a237764e98dca4f960f4adcfde595481403f9a654430e54a5ac329e826de7efe4f7f78a1cb5710db43766072e17bde676a237e82d41e21dae9a43549cdb5e19ccdbed4016b413d003ce379df762e34ecd3d50eb45bf8004f7e41c0cc27c4160cf4b7ae345c44387abb92c0cb202660882feb8b57d4d27625e87e1969f9ad5eac5b7f1d6865d2cebcbfb5e3267077f741d3d53c1bc2e2416a4d78668294417a49608d2d3c19a4e30063adaab03a", 0xbb}], 0x6, &(0x7f0000005800)=[{0x90, 0x113, 0x99e1, "51cdeaff59b4ad09df5d0acb4345feb3490e958eb51f7a7bce3138ebbf9a0d00393bb5e2e003b0802ca54c9940f440c7a9037f1a00ecf0d2b1754b7d364c88b6d25611321e162817ec144039ab5f6a70d5e7d131d2f642b3a20e5c3eaaf5a5ea52695c11b1b891e4189d239fd5414dbf79fc34cd51483551510fe7fe5d"}, {0xa0, 0x114, 0x5, "877b01b026508f6ea4a5e26134afd98f54d656c4d276082a8b31b505b4d7e3c6df21b8b815b52a3fd56df020f52885a5f3bb094e90bd796ce9de875e9aa4056be87ebc6ae19b715eb3ef4e41192cd4e73ef73108bc337180bfc653153ac3802c807c9c766a8efe952b61c0840897262b8dbd156c0bf491fe97b998436c5b461f6549d522208189b90cca96b3"}, {0x48, 0x116, 0x7ff, "d14ceb2c2a74f5ec688b461e167972a31a888d7e1b331f1ebb36180a7ab1e5a4700e2cf0a43b0de7a4413dfb3de7f397f8fb"}, {0x60, 0x29, 0x9, "43b356eb1630bc695dbaf7c6f9dcfd37e3fdc114765fa955e98f1c95b746c1e3bc58c9a3977d0bd5a2cbf56050924b5ac1c234745b635d32a2e1dfcd77187b915b3d97814c88481ad78247b5344e"}, {0xb0, 0x10a, 0x0, "1a1b14ac297b7be1fddc08bed3bd709997f4dcb6cefe80ae039ff54b5048abdc1c79238dc367609f2a6926404fbd0c161b9816243f3415829caaa0b5ab9a2824ef1e792dcffadd3737b5c3ac375677323cf46b630879a82cd714b85e1fe983cfc43019968b32533b897a3718b92515d03d9a15e6cf07c6a72bb6b92a1220c1684636d82dd2d9be85990eb31e63e81bab574cc301bc99c5b42bec6da18d4ede0f"}, {0xd8, 0x948e9d77a6d7186e, 0xc229, "e53398fda0d26209f6579288b20a3424c64b1e7d3472942a14e8f77d0bc24db2158c35ed409dc15c925b23b198904d9bfd25d58fbcc812c5dec9900d4beb47b1758f51b909f6ba8b59b43cbaa80757335979eccec5fb5842aa75f667463eb4e86983a659abff2c494d1a51234b9b82ba078ac1e1cc452ec5b6fddee539fda5c28efd111aa8009f8f738eb12f990dcc23b0f1bcefabedec7a03068b8ac635d16bb14f0007b6fd9ae588109261778a319c584ba0b7e2e7266d570966a643fd96e67e8328d430"}, {0x38, 0x1, 0x7, "66fa3e42a524d90d18d8c4f919ac767f7d285a84e873b654c949444d832e3a15dee8f0b2d283"}], 0x398}}, {{&(0x7f0000005bc0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005c40)="3956bcdda47d6350c08577393b7f78ba68db15b21a73cdfb9ed3bb83572050f1bf14699cfedb492b626920254adb3031bf550bfbd4d9670c0d0955099f798ca161e276610950c11bb084a543e77bf0bd821a3bb4e246da9d6893a5be38149cb634e394bfd8557a8d72b87bbc9e5e3d5213c3ef6345ee2c0a721ac7e3198d90aa56b7411dd87a2077c01259946102f531def0e81f191a21cecb48b1e596143d887404a5df3b23c675a7e0ec4542436052691b1c622716616a0e6f6a", 0xbb}, {&(0x7f0000005d00)="0cf1e3949498b625ed060c059b8f4ddf915b9fa2f8bedcffb4953e58d3297ee372105adabb4819412e5a60a3b962221aa64c4aa262a0864ea6817b0247db726b551a2da63de7e3fabf547ccefe88a310bea07f6a6f5368d6d19fd93bbc8ff3619549f803f0fb8121397526548ce69677e1b837f6ec966fd79acec4711d3e8933f6db880c180db86d9f1c38fa77f796ed579b3dd83d1fa2398fbdd9def58e08ccae89bb22ed9ebdd89d6c261a9dd9e2ff60bb33685629e9ed3e710a7e7bc96fb4ea733f5361b0c0d74a50bb0bab157e16b26539138054e3b643b1850bfea146d69146eae7e7a2ab72cf5d89745008", 0xee}], 0x2, &(0x7f0000005e40)=[{0xf0, 0x10a, 0x8, "ee1fa02eacc707ab151b48ac7431b28e590aecf06579ced3b0dac25e6c23cbeb46034152dcdca37648a2974e508d65c4d7659f4c2fd52fff05c7a8c31d47b9e427d98bced369a65300a0fc860f5f39e2f28d7977cab7f5d20f8e64543a0325fac0cb956e2194e675b08306a65eeac04cc269e3f6eda0d8ee1cddfd1359e6328fd3ca0c64bed265a1aaad415fb81be752f3ab321d7123a9ae0ce69924e0135962617d9e3168a991f1fab6e19d068a50425118310e80871764d0d407118bd33b40e19ef5fa33f01fcf9c0554043319a1db2ba3c5a5a0e5aac84a4f358a27"}, {0xc0, 0x6, 0x200, "7489a4a5d2f4352b4ee51c37941460269bc9e9850f37f02f32881db5a6c20debf8d8549c730c7559abbefe6cffdaca9b796137d97ea4cd553d24798010cf8615cdb23c7ee4e3de45da6443470eba935e67bbb26f1f59ae75bdfbb489b74933a5e503cb8993ef9ad06d1cce2e26d2c26f62c713e7796da84d28eb6784bc9a8966a8458a4140102b96501974007c34886d6f60065af329181febe7c769fdfab2aa64f73f41b447d64835ec260a0b1c0803"}, {0x30, 0x104, 0x4, "9d728c504febf3c994e435902761ea20afef0928fb614d1eb86ea6648b"}, {0xe0, 0x116, 0x6, "56294a00fa90cdc8356ddbeb2715bc33742c9f01de12f86a2df99b7b6eb6e15808a32a441c52d108ab39e6a7f6ec86d017c33362acd22bb956b2cac04f364dc459a287f235528e0915887d71da2b6314e2c5920e7e8af0221a73e9e03f2e2c4b393982293aaf786abc3a2be649e30669b169802f69eedce6203bd58df8a17b01132e82cca8cdfe7ed6eb42b30e8332a307e9644770deba719cc89636d2e8deb80e3c449a07c7b3391850e0538f4a642906b1ad0c2c562ed7a2f650a3f37c2b05bdb094c0b7007dbe37169c"}, {0xc0, 0x104, 0x400, "d403c090b15e1ca900d143ef3f1c89771346e855675e5fde504704980a3051f3f7594144d57fd97f68f47ca32ef226f5e1d7f8327bb99cf853dfb00f7d8fcd5bd92cf43f408dd2c2fd922d488654d1be2b879f1c442a7a9c7b7ce8b683a77ecf703914e27898f0a2686d1e4e84a4feea5cc8d739e125200b55d5e475c23217f1830348789d407731b81915de34e9aa2eb6c8ba5993a88a7e61d6611eda844bc3c4f9c7f23f2ffa58900d563c7465943d"}, {0x50, 0x1, 0x80, "babdd800879b8b9105c0fa7b0bf7a45c70bcc989787008c770016d613ff0e7bae8675d04d7b39960b0d9a4181766859691eb7131931ae9040b3752e4e7b8"}], 0x3d0}}, {{&(0x7f0000006240)=@generic={0xb, "e5cba3e57d1eb1a776966adccca332e66373ce7e7014b8bc5ce86ab2627acba4eff1c50823da8945a835c6a10d6b59be785eed48df6e4e70cc461112dca840f62d2e6301ef9221645753d803480036ff5b49911df68d9867df70eea1dbc9f92b6d94156e660f611e47ab0869f020281d0b74fa3dc020dbc4b20fa3dff5ef"}, 0x80, &(0x7f0000007500)=[{&(0x7f00000062c0)="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", 0x1000}, {&(0x7f00000072c0)="98791da561f407892b948060f25e83f636cebd95cf0c25ece65d6639d781822bde85a7ef1a39d690e9f7fee0ebdeaa8e30ccd037da76732d486d4e2e764ae55bfe9fc8b74cb7b047bc32388f9f331042f49374dfe490d8b68f1c6274c52f56e34963a7b987c8a411ad16630e717212748877b3d9ea6d7bb9ddaf0244f6", 0x7d}, {&(0x7f0000007340)="07f45bae755fe89a456975845ddea7e243bf9b6265045ef5eff14b25e4c03237730c0f2d24e5494ba86a5db6a07f6b26f96d7803a67221547a589e83bb3b2dad3c6cd7562e3e86e920a5648ddd08e557681e69d625ddd7", 0x57}, {&(0x7f00000073c0)="99683d1d7663362560409c519f469488", 0x10}, {&(0x7f0000007400)="b8051ebb8055567e3c07c36cb20f08c4cb4b2362dd151635c814df825931ddbed4c8dcb9e9b3ad7932571411e6c5e60376bc3d5e8d3577ba153aa9317f679fb782577eeea9cddd5c4832cf3a745d30aba1eb79dc094879d7d39ee249f940b75bf2a4b18eaa8fe4707485e50aa501430b6cd81e1e7997434712dfba8e12457c320b940951631dc8da94e004092d051c68b04d43a2c69672b40c7226f927235dd7ae90cf4e677e69db2b2d276caa9ac2e270a1b6919216d7c9aa4a0f2a3db9615465c64de76e33e316317e9197fcbcc16591ccd86976", 0xd5}], 0x5}}, {{&(0x7f0000007600)=@can={0x1d, r4}, 0x80, &(0x7f0000007740)=[{&(0x7f0000007680)="d889d06151451384c86eeaa528c6a56f140368d712b77bd21697e099e888b935c575abbd6367f1016e278a136f2e9a903266616d7762010bf46c6f98b6acaf5ea5540cc702a646a656337b1cbd2a8a703a4fbdac58f78b87165fc3f9725e4bb2a3c92f5b2b5fd16dabb5d259260c828c14173a2d67194f0314e51f5c6b72e6a6c40b50d55c9255c2", 0x88}], 0x1, &(0x7f0000007780)=[{0xa8, 0x129, 0x8a, "1612c7d4927571480ce63ee2d8909e711fe9b2d7329725cc9f726150a4f66903c572532775e346640fefffe9d7179a734ae4d52fa06b6f7fe4d6991a759672023ddea710948e22f489457bf7366abab0dfe70add56ea80718030e999147b32025071f652bfbd53ae104beaf40e1b5d8a22ff801fec55a19a5054b96bcc14ef13902864878f0a629223834bda861386ff9c817f8bdb3eff"}, {0x80, 0x117, 0x56903da3, "6334cb78c481f8cbb5bccd1f677ce4dfc46731df85d9cf21c0745212e620efd3d8d8ddf985e19f5e3f24182ae38eee601718a3127a9698906b1830a3bc5d8641cdc7ebce1b5dc6be41eb60f0cc05a87cf23f9ed424ef1b305025980da53f6c63bb9a37e7f58bb3b8b24a955b"}, {0x58, 0x105, 0xb1, "07b4212c4a46e0855a4bd00c361a0c553f82ae585ae8c47dd2ba3c30e68f294c02cbe0e146bdb96dd642bfe1adebadaf562f0b1c0a98a7a0b08b5e47f412f9eecc725f9f"}, {0xe0, 0x114, 0x1, "cea932786a933792fdde1979882188eab3872a43c64b8f05cf8580b24284c0e483f52ed9a7029d7dc6bab00956dcb53fa07ce59f72342481c9838b233ad95731868ab729222550bec18de26ed80726510ad054861d1e647b00ac4eae0c5aa52b48e425294c65c961f3066ab972c5823e1764d3ebe27c91d58f5d87a22b12411427caf7cd86a806be697bae3c60a27bcabb6c134eb3639613abffb06e5b5bfeaf6056800ed2f00430c683c37e94a946413d5681e2a5c1ba5b02040da7a02a55ea29255b42e288469a4af46b79a83b"}, {0xf0, 0x29, 0xffff0001, "08eace9da69cc3d2068e963e255d21d42aa0486df493fc7fed451de4df2b1d11f8984486d7ea8a8d3d9148523d5f63b5fe672e2c2b72c513363ddce75f07e1257e89782072c1cb229e8dab20bea63bf4ff96181edb5a1a68311786aaad1155dda4929c58ac750a37957e593e02d8b304fda46bc2f14601bcb97a931ca27d7fe0917e24f11b60262edfa81c9e8367564ee8ff611311f75dd338b975ca50f0fd68fddcf6105dc42aebd38764fb1db1ce5cf30c054b25463474937e8590982acdaf7ab5242473957128e06d1adf7bf37067e14de134ced120cbd320b8"}, {0xf8, 0x3a, 0x5, "9f7d7b990c894fa8bc191cb0b91bc0ed7b953d8ce59ee6ccdb17bc5748c39845db02bdc2802410932d9dac7add0fbeb8d7ede86a1333d5ab8919bc0c1295d420ad45461548cfb23d36ff64154101e1971cf23eaf6adc8f32c2baaf860b9e493981b248c18e98c5abdcda9c62af70084abfc496027fd469da2c7c7eb4e04404cb8ab049744e211e514ec1e03bec87ae529b417d9635e4860a910a7bc0c97f39919a7879274db1251a8197f969b2070ea5a38a69f52a37226e09e708906dbf46970726377a3a56f2900aa106bfda9235b0d9a9c95d07ace6c4a13df297cd6336d1affd5e96b9ce"}, {0x40, 0x10d, 0x6, "44eaf745ffd195df27411f733bf30c7db2f6491738e91a05fa6e58cf66fb57a24b72695e159e5fde0644bb48c3fb"}, {0xa0, 0x108, 0x10001, "541cf9c38e54b1ee5070251737bb93dd0b08d6dcbf1e0f57fbbb5b18649c2e4c9850b658d611772e28ecd6032bb54143a6054096ec0bbd78352038b076d9262d3458c28aba0a0be341a0cc79487018b8e287304c17a40d91ca2499bef9c6fc00a71efd4d3997c80a9e8f9232004a6f5fb97980735e99dc287f0edf8721e66e4608e2eef6abab57aeafb7"}], 0x528}}, {{&(0x7f0000007cc0)=@ll={0x11, 0x1c, r9, 0x1, 0x80, 0x6, @broadcast}, 0x80, &(0x7f0000008180)=[{&(0x7f0000007d40)="16819dc63fb135115a32b2ff1a4001a92366120fc9c2562d196e1e41be9c6a4c36a9373363e70a8a247cb5f83698487aa78d4169f1cec311291dc16533640f3b22", 0x41}, {&(0x7f0000007dc0)="ce3be2", 0x3}, {&(0x7f0000007e00)="79db6823f38cf60acc4f05a8dbaaabfeeae26a88209bacbaf550a8943495a1f453fd868b085592e8d4a763df28eedcdd769e61caf0a7e8fa59ac1e4633bf91b673362f3bab574577d76de9cd36386953f0349ff002925237d6c06f87eb9096627af13b7bcb545842d2475ae43133cb31caedfdd8b8a49b164b5f5b5fb536d2d13a789cef429821d816c444d5c74efbf32e99bad873c7", 0x96}, {&(0x7f0000007ec0)="31ccceea0d9f32d528bc1d58a4096f77344b804144194e155f4ed766a480300a31ea5108ee740856d7d2c50eaf6f15e45df1f5a27738edd12227ff79af8dd4606e", 0x41}, {&(0x7f0000007f40)="444266f45db92aa68916558d77dcca77ec4db6261111d2d613120c472c8d945007bc61a0996324195e2b84c1ac93d85a20014b7b69ad74b47e8465be75a9359f5fedbb2c44a778160ab0047f1d38daec1058c3ae52c36857d55dbbcfa5e4c7d28eb84c", 0x63}, {&(0x7f0000007fc0)="476a0bf4740435631541893195bbdc7d030c76f138e024f812e917a9e3115bca03f72eb6518b70ab52c9370eece53de11579af7e064bb653b0b9eacfe745fa5abee56d1536fdfe107405290a8ea55729aae793fcabea188d7951ae4c48c0f8212e401fa8406fc1f3fab09dbfeea4a0252bd7c686fa30a029b8db29e792890f610730e1", 0x83}, {&(0x7f0000008080)="29aef09fbaaba3d5ea0fc69e482a054d168df8620062d2ee5c5fb599d706daf1db8e86b6d8ec011ea12ee78c343c13bdcd656a1a4f8e1a4ff36c67242f997bf7be7edead25a765f6011a9f6630e0c84b015ec9eab452b44b96aaae1ed7e5967588380063b8cd0bfcebe012c44db3e838e3054364118c0dbce5eb0be2ff629f25c174a7d9fbab7ab15c8692838d2c2177d371465ebd1fab712300708f0280be87e6ccd3bc941694c67be3ea9ea4e8aca13304dfe86a2c61e96cc8e96a0c9852adae957b9f96c74585a7c54a65ce686ee31c", 0xd1}], 0x7, &(0x7f0000008200)=[{0x30, 0x3a, 0x7ff, "d4e6c3b2bb023d7d5fe923c093577e00df49df8b46ff39e0df"}, {0xb8, 0x101, 0x40, "5ab28087e719acccf7645c2c896426718be51c72da515fc02041ca92eb54475ef4916ba834d27c129e470cbdaa7893550bc22adbbe868b96a4b348084da6ae349ea47a9dcad20ca460a3ace20f86cc212dfe3dc9c6284fd545c4263df7014022a224d67396245eabac450535e99c44a51ec269b515869bdba3415f14ae7c2fb2c7b31eceb7c11ef50caacbb255c4ae955c4c141480a0f0ae12eece0baccb6660089b141e98b4"}, {0x58, 0x115, 0x40, "d86df4faf44fa968cada0ef1f0402edab4add420bfc8c767f89276670a57e2ef6809ef2f5659426da4473287cd652c9a5941d89f4bf465ebf811e6cfda5b9f13984763"}], 0x140}}, {{&(0x7f0000008340)=@phonet={0x23, 0x7, 0xff, 0x7}, 0x80, &(0x7f0000008700)=[{&(0x7f00000083c0)="953b3d45bb8ea0acda45cd87c103f563", 0x10}, {&(0x7f0000008400)="8d30ff313c461cc2e55b6b0b5a570c3d0293a6b4898dd775f224520e09ffb85a155244af624f07954d1291d45371c128cf95c727b3dba5fbb424a131cc5bd2ae4178c502e94d90647179db93dab3365a01a2f5918035282ffc65869d2193bba07431a73d63979ca2bbd8ef600ec47ec8ccbecd17a68b36dbf0b77003684a9003e956fb534e2eb4e7d0d0775def2cd4", 0x8f}, {&(0x7f00000084c0)="145432bfcdb68cd4abddc76d317f2400b54c2eb880b948a838e24bcf1d73027c4eeabf9fb8b6202168ec286c394f63b6d2944bee9b73bc827aba40158d9044ed119dbe59b268a2ccb3edd1c4e5a264f1ef658f7c3202853b238617f38c197c42fb1d5240ab60a23850e502a511dad30c0113487125aa9bef30e712a9b1d4266caec406cf1b1feff03085df401abef905d1241472b098084aa353ed52de44a1158c258f7f4086c6556bd460d8ccadcf2a4747ae9bf452c8ac89", 0xb9}, {&(0x7f0000008580)="bff820cc5de175c39eef2491bba526c6087db8f6336039b507a5429bac925bcb0b4ff57ff4d119211e27395f8c37695c6b2dfd6a6247b4715e427f515b1ce578d05d241755391c145703bc16959d9be72d15b922deea", 0x56}, {&(0x7f0000008600)="2b62381ab012b109762543c21f02443f1c95ebe997f6f94c4d25ca2f6cb97761d7ab2ccc349f7e30e7e5c002e7a9cc8f8c22ce7049c6ece0f4f04d8925bc560ea17c0a0be71eee30184cb434c7d3847627522ea3ed6025e47c5aab1db0ca26606a296aa04877780d1b32b6fc691c37a07b03dd5cd52e44307e3a53070805de6e671454dc2896c510f5199819696c77530210ed2d92001e64f5ddd4fa03e78515e084fda97b699c1512695dcaf421f4687c14cca1ed6afee54c2920fe9a279185844b909c15fc32030a115fabbded112bfaca94a9b592142521a13a2f572020b76b39ca", 0xe3}], 0x5, &(0x7f0000008780)=[{0x1010, 0x10c, 0x4000, "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"}, {0x98, 0x0, 0x1, "381ea9cb8bb2d85df2c9cbde0832da568af3b355cda032dcee4e104c0dfb21e24fd67cab40ce443e5d9a22194686a771742b519602cdc4e689eebe0f96ddb20829a61e704885f4ff51f4a746210d14e3f8b97cb2e5cfc37d35f2c2f23719337246e2a9474ea63f36f077eba7f05a18b09390804a96af6a46f4aa9bd5663d472b5fd840"}, {0x98, 0x6, 0x20, "574a8d35b2dd97cd7d75c57c6a727ea33783e9230863a0918550d38710ad21c7b9b7578d67b2528b82ed36cc4f1d5bb6ce99b00be981a711bc0894f8da3104cc046edbb1a24f6e3d23a6e00cad57432f847dc2b746936e733fc8b6f97e9f8d76ace362be6425451a27db9adf1a76ad1c5547a2236c4e2b08a96b632698e05b920bd451de"}, {0xc0, 0x112, 0x800, "31eb94db89fe63c90fa926890a5bf7be4376df3df549e3341f09716dc46ec4ddfc4be4dc894dc9e12e7e46acc0c7f8557b283fc3b3e4ba91d59f3b781cb6d1cb57f85d5f0afaa7130c0976e6f806ecc4bbbce9a61b2e755503b95d615e5738da41bbbcfba1f2010f64b5488ef80a52f06494f7ff9fd65fc6917fff4be04983406e8527cae943445666a343bfc12103b2822ae6fbf1e4eb888763457882da894f5acd2ef1d20eff8746f7c985a4"}, {0xe0, 0x1, 0x1, "1e659b088e390e7a66c65a9bcb2b9cb712fb9828f5980be07b8419d2d5cca29c0b8ab99c81cf5e539c8ac0810c9ea63a21bed963c4cce1158c484223733d8857f8172bd66eea95491a3f46920a85c6cf1d992329b06b6374c49d6827083b4395774054ea40b33832b4ee141968c6ae40f1cf7de86ac4dcf22a9b23265ece6f6a4d720d7eee3e524b7b8e9ad20a4f66bd18839f6a19804f9028554aacb32daa2d83025a19c3f4f428cf14923894e6e972b4b39edc77a8e4fea94e6d0c53fe6fb6e79952745825d6bd5b1a0ab2674825cb"}], 0x12e0}}], 0xa, 0x20044000) 20:00:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/27, 0x1b}], 0x1) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x20, 0x19, 0x17, &(0x7f0000000380)="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"}) 20:00:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x5, 0x1, 0x4, 0x2, 0xfffff7e1, {}, {0x5, 0x1, 0xd1, 0x8, 0x76, 0x5, "84b4f45a"}, 0x0, 0x4, @planes=&(0x7f0000000000)={0x7, 0xfffffff7, @fd=0xffffffffffffffff, 0x4}, 0x7}) fsetxattr$security_selinux(r2, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x2f, 0x3) r3 = epoll_create1(0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r4, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) 20:00:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40001aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x101080) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000024000705000000ddd335902838a41060", @ANYRES32=r6, @ANYBLOB="00ffff0000000009000100686673630000000008000200000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x4}}, [@filter_kind_options=@f_rsvp6={{0xa, 0x1, 'rsvp6\x00'}, {0x5c, 0x2, [@TCA_RSVP_ACT={0x58, 0x6, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc}, @TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002980)={&(0x7f0000002840)={0x110, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x110}}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6c2}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000440)={{0x0, 0x0, 0x80}, "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", "99f7576926b7f9673d693b52096f4ad64fa232d0e7103ffe24480f26e8c19059d034c8c1f646e8f1ce42bbb137a9b5ac2e3130eb88b97f06bb47ca4ac91e397b3ab339d8e4a988142499510f7c5ed7788f93d2177391cfad69b9a329e772dfcb868f06d9f38e0734b4e28b5126b53b337db1156e86289a29d81a45421d3641940e82be4a948576f5bb7115798e960c8a87dc371e4de5889ef30fdb68298837032df274f785f0b9aa5120dee3d2794e88f8f8819144b9b3a01fd329474a4cc1b35820cf2a02aa0d4180f77b651758716760c7fe44bd4c971d476a72ffa3bd55c96901e43f786681d6ad90d1f1e55af554dd5b04bbcb4eded67a13548f208a7e5b94f1b821ff5ec5b8aa509a81673ca04825656ddc2846f64504289771731042d37bf4a59b989668c903e13971245cad92be67aa260bffaa81c4e950f84c3bb9d4e92bff1f5bf7d8c7eaa542213eea95dece6a198e4158e6dd7e0a34ef858f609ead2489273f6359acc02fe3a1d6733e7e8f7a7efeba23eefae1ed2a2a8affbc4d0d7e20f1c2e8488d9e90c126a9534efc24170c512f7db262323ad161c6d1ae61c7e02bd0a2d2018cfcd073a1a798081613f703d05f809fcddf6b3374e924579031993db8269947728364d2a10200fade99194af68f2206de46cf885a2d0e0422eda114ec5152504b50ceb349daf9a3cd98aaaaf436c2265b7c2beb9c1b8814a3ca386301b1b6eac6de96da01feba3a3bf48b28cbb72e7b839590725b7d8c83b5e4953943161e2f3b12f79632c94f43f3c15e5648bb9107a79d252ad0ab31b8c562bb26ac155bf9de862417ab77ae8e7c28aee72525a1145cbb7792ed19402a2fd625d340453abf2446b95c3d5ed065af41dff570387f627df4d056cb6367cc0fb3573c7544a214bc3d9c9f62d340abeb7e3d69a8ab42ee04d568da8b45e2cf88b05deff1fab791d6fc83494dbf9d4a3ef599f79f61727f6a459ff95a1486638ea519d0f75f66b554af6bbd5a292557d5414607c4e0c0c3208dc9a7f0d7449409605763df7b0518c24f5c4816f039998bfe24c062d2d9f0435a2c36ddd211fcd1bf0ca22fe5ef6d787c5a0ebd156a110c9c4cc9a8ba65560a9907dd254ebf6d935cc4b52b75c570fb7b10f589b3eff3e47de3daf68fad3c77a684f739ef1e19adf4a69dcfaf3d68b5376e17102aa18695206677f2fbf33174f1dbb33735f609226de0cfe783eb5abfad55f8fa29b98850954402fc863c80c44ddd2ad04ea1a3e1a4e67b8d07a048665e2e417a2810fa8b775d7d4774ef23d8a68d94eb9d8c1494167d5dc4a0830ad9a917891975dac19df3caec3149e09410e13173cfdd1f3bf8627ec13602ba1e409a2841d0ce5304f30924178b1a4d619642da954859e67265536238c9ac294d61b14ff050442640b8206da8935c2d684afc21bd0ee89e9b606c2af56234d365ec14cecede75da2810c8c3dd02b085bc4de3b0cff8e16dfa43a5da04ef4102d8da6f6ca8df25499e06aca7ba454d7ca3b7ca036a2398b811e08592cf2b48dff98d4559cdd23293ecb2589e9bd392d598e4e1220b33993f4451ce846829a9e5b9100acbdcb1f17031fdad96ab8715fe6fef5020b17686ad6f6de5ce87181bb57892bbe310f4209194653ffa2f361e0f48e58b88feecace0d55d479e0a92a36eceaafcbd390c992b093c42fda28266b5e0c5503c05a359a00998c2c60a316c0805dbca3e6fd29f43cf7cd757eef9b565371310f0f4a4389a63b74b469a5c2d2f0a9e32e13c688805d2f0a3bc0be30c9a2d22ca8bda353313aff115105ea34bee0464ce466f7cab33dc90fa63ca56d5b43dab8c0d28e264d969ce2a99ba3c6866d96cb8a10af81e39423c89ad9ee5b0052365a4165d8023b952fe5e1086364b663ef213121a5b5d31440f0546f4a104392354b97c37a0e42f64acbeface81c2ff4d143ff0df219daa4ce19d982c238effef5317e8f12a705e038ec263c1204c85f9ea0045a964657991ec50bfc417c6572d1e16b31d0012393f890cdcc9de7387c48054a399298e3376f5c4be910585d4e3bf85b0f56f02a24d771c12e4266ec0748d1b49362e5ce2f09edcc4c2906eeccc52b9f50ebd734325736352e4f59afecb9641516b1cb43226db15c88e0f4c5108b12cc7cdd9f59c99e96e0081ab671673d73a54a55010f4b1a2bb0141a883dfffe69641154d9ce72b3f0ebc9acd10f4f4d8d3cddef63668cc73f34225d58acafc1c464de964df909e959ec2764a0efe66d4b49466a1a66472736c07a4e363b3b03b14d02003faf891b03afba928756a263722885aac7a0c402c6f9cfc7f067f4c31c40ee8c18e97edf1bba1886e2666da5fbfc0c716730f65b0357ca80f9cef3cc4ee6a69421d765a177e20ea0df6bfe47278e4855093feeb9728a8b05cb40c6ba5a260d63268d38445792ce73aeb3fe4ed8b6161e6df34a0fa0dc899fa24ddafc4adccbfbcdbcb4fd56d64ddde46e77e8836c9e92e4f08a9646e92890304e3e3571f3f3e18fd8a8f6d79205b317d1afb046e66d36605fed8dce71082e76147dbc3133ff7fef01a8c7468c633aeb189bbc9240513b5906c640296fcb64f32480805c8c87216919a2017b98d9e520494692ffe83b57169b2814152a9a682e53c2131608fca99b555558883cbaaefd268187e81834dcc36d7888c1304517edcb315b3454a6bbe86e3db6ac62ad965e5e0eb04d2cf0606fad0d4779f5a86397349cc7e751c41ebd0c60dc3c0bcb2f375dbe250d609c6c6736186605d72c1ef4719149eefaf846a80f7aaaa91f629735b0220aa95828173ddb4b421dea64f763adb92fcd57c8cd245e2c2625ecfe8e5801ec7af0a573125366cb8a095317ba3357305953c54c9fb688e91b5413871fd8ac96338fab869cc4b7480542c0a26e10660da80b563d5d5095276f5eecb36f1a7d5d5f70d4a6e54e1e0b969392b56a29a7ddb74be33c287f8b5dfc8557bf2504efdde495734e42649b77536e0489ceba40c4596f6cb5daa0e039bef41d4550d9958135b8605dfda8e66f7118ac5732eced14faec097d0eab362169649add16273d18be9802441a1275256ceaceb00642fe2fd3252bc33e6979866733915a59537da1e8113dbbee850423a7aca649f16a72516f621f70cc0be0511c15b069b37596e513626495cff76c0241a468e7530f3a833e5b87e440f0bcba670c3661475dd143a52bd9d92ffe1aa92f8de06de85d5bde2b61a73994e9c918336c0803f71631ae67e7ac2a45cfa5325b95df2942509f56f0598d1ebd19fd0b9fa8013451121eb4e65e1164ab40aa94d84bd87c65bce579a82c3cc064a1f31b626ce16099d891906123da862118fa11a4e5ade7ef7343154fe89954ce1b1d924ee563c791a069f11b4fcca3162a9e7df8200c4bbb655741c279b7e04cff51bda60d7bd7324b78a9a73b4d44c61561864ad93fffd03aa7bd653b1f33ad23b476a105c4b3e05f99811fbb5072d9d9818dab91de0988ad1580c7f10dd75733ea5cabe467454727fc0a498796ec34297479124c5ad8578ea6e2197819108e2e3522aeb4520f45b11dfac06b5bf853ee0df4345cb4a9f88bfa993af6efe8862c6ef6d53b491fa5361b70db9bfe03a0daf23f2e1a9826f878b77b8d52eff2c2453a5fdb7b08765f0282aa005881944c88554f197a0d08a7fecb3e724e16de98f97cd0bab53a66d467a9606a5daf5f23db6d7d14b5849ba3f118faf436607a4caa020575c86ccdb08c1976a4eb6f2629755312d50f97d1e807be020c618d1a03ab420dccd4e37b6638c2a6b29710ad2e5afae84148b2e600ea293fe59a7765b441736e0ba2886504b0089c52d8796198489b07e4b58f836e2123f2e08c613b23ba034071c8d72ed31e3e5b49284f0b804da36b75484b9a22243ce6f652f4a5977a4addedad2960ff8497558a2bbc2332f353a20d7d64584233d0e11ffc2e8a61cd746527c5b70dfd762de2aa68b2de7d8a5016a37b854a8a27978ad2eb0cca0f812c0e44ee745b9c8f5ddaddf1f8afea3e478bf444626b758985b105984cc2950932cc4b5feb54667942705a5c1746dcb3929c5eab2312c42045c4c211874438fce3a0e92cb97bb1e59f80d29050a639e1ec6dab54e1bf2e5fe309d021fa2c402670f2bae643e8e3f6bca4501dd6286aae402a49a55149284ba26ad2ff67854f11765d5532a95cce928a9a53c010988eae631843b99a67d847d54884fc3d477cb5dae9fd588d2133c8224f32bd3f8755c227fb608e1482942a6000d501088bfad1fb5968f12f7de5aacde4223397babaf8f095b72dad09aba7320c90995f6956e77a04a7c22154b7dbc4f0ac706f0863f34b200705df4fbb12f6e5d3b8301a1257e6fbfb0ac0cc627621e10279d730e3840a4e5a9fb6dbda33716742f71276de2f50f6305653a81c9374561c518090b092fd6718fff9e3d061027d674a44ad734bba77d7a7cad848ef911150c015281f3b2c11bb7143b1e479512ce3b28322fb7431c7d8a3cb40b1a0f9f36261c646a4a5659a7cb7eeebe7bf253ee266fc7f21d78efadf741c25b0c1ac1cc8725e9b50ac9e8b12d9ce4d4dd79d7ec0b43a5d4290b3e8d0b0775af3e1be8a33f42256ccdfc8bff9852a6528f1ca2eb0cfd7332297cff4d053f97acb56c122a7e5ae26e6f5ca4c922bd730681edab38e99a95c0c2e66fc483f82a1c9a44394e519faf7a1f1ff5eba37559f85dbceb58d0dab92b26733cce8de24a25df97e401e12b3b057b5b36c4436a4f2f0af6d2833f71f6eab3e61e7fb8400a6507188fb92ff1a457a21c15e6394aea5ebfd8494423adbf25e2508253cd00df75a0e43bcd62a18b237c3525de35ce244ffe06a740c5d8a24b93b4960f03fcce03142443f1edc627d5132f0360c4b0f40da3761ff8baf245b4fe761b0fa581c55552a2f8f8af9bdd932b473dda5f286e04606967e2e4fc69788445d77b7dc558022ed68601f216a744f2efe5f3dc26fa5aad6fb9ebc3e10628d4dd273964d7e1e5be5962a4c96f831e162b209aa21ad21b66dc1a4221f7aed486d531f7f4b8895c2e2a92e739f32280a6f36aab5d2a76ae9aefcc881125177ad7cdbfcb737688967a81b0172bc84f154ea62a45b0d60c8cccdfa435116aebe92431f2c5d73b48a9dce938f5bdba1ca579bd41905989dac5d927e1994f258613ce426792084f96671b0ee2114b1333fe5a9450f2b0c1fb91a50f4176506342b1a2ecf5d68b41954cb21c16cedd39e7db8c379a400a70ba713b2b98726215330acb239308c6fe32bd45e8d7e511c4fd4fe4d5e8ab0f44bfcb6679796c9cfa72124ed2c4b8570cadfcfe717f74e4377d5c2b46618f8fb8e49f9840a4c22a24455f880e6d702f9031156a4ca6df07274c507e2e84f3b752955dd8114789149061a19606d918db6575df3627a8a1670bacb99e6f865f94d98c67d506179e2bdfc74b8be48176b2d2d9b5ca82930bca3791e57663cd581d19c918b31d6cbd149efb79924ef32f844782c2f9de0a238ff4d95b45c8fb15824a42c9968721228f537adf8be982c48983a6750912763339fe9fa532c42e0b076247f3240766b3eb043f5a729763ddd5fbe7db28891023a28c68be0dd8b03940da71a04284a05640d4239bc1aab7538115d6c18acae4c764076cd626e109cd53b05df1958e2dfb93d0eae09f6729b5acefb95fafa146db0e281eef4874b1fa877b5cab03a5b2444c87831111c155658c5dbbf8c3dc32928851fa598f8c6f3121239dd58b8a4560d14ddc4bc79a3d2a74"}) 20:00:34 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:34 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:34 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x300, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x1) mmap(&(0x7f000013a000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES64], 0xfffffd6d) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000001c0)={0x0, 'ipvlan1\x00'}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002cc0)=[{0x0, 0x29e, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r5}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={r5, 0xcc2, 0x2, [0xff, 0xa1]}, 0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000340)=r5, 0x4) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x80280, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000070000000600000000000009050000000e00000000000001000000002d007f0100305f00613000d5a05b52cea562e70c"], &(0x7f00000001c0)=""/243, 0x3b, 0xf3}, 0x20) [ 226.346133] Bluetooth: hci0 command 0xfc11 tx timeout [ 226.346362] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 227.145104] Bluetooth: hci1: Entering manufacturer mode failed (-110) 20:00:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x101200) write$P9_RSETATTR(r1, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) 20:00:36 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:36 executing program 2: setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000300)={0x3, {{0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x7}}}, 0x88) socket(0x10, 0x80002, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x78) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffa0020007, 0x0, 0x0, 0xb2) 20:00:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f000020c000/0x2000)=nil, 0x2000}, &(0x7f0000000040)=0x10) 20:00:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0db6020a844727d24e230f0000000099bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e232e725839c97b910000", 0x48}], 0x1) fchdir(r0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x3, 0x7f, 0x0, 0x81, 0x3, 0x3, 0x2, 0x3f, 0x40, 0x333, 0x7aeb5cb9, 0xfc0, 0x38, 0x1, 0x8, 0x200, 0x5}, [{0x0, 0x10001, 0x7, 0x8001, 0x7, 0x7, 0x2, 0x4}, {0x1, 0x8001, 0x4, 0x6, 0x8001, 0xfffffffffffffff7, 0x0, 0x5}], "1b629c3067eab80f2a541371bb6c2ccf46f7a65b3adcf49546a3359ec649fea93fc95745f845ef440aa19e612a584f822a5115dc40f2c3fe1f9475007a9a9faad881b2e0772fa80d980ceced578072c52665cc51faf9ea2c16cb0a2a970e5b2fedcdd5c38e35b8cf1b0203ec91033f9c82a3d3f4cbcb42d3ebad08b6cd385e25bd13cbe7849524ef4ba74c4a1403788293e1a47de6f915b2f3b4d5f8f26b7f08d79d9a1102a62303fa36721ed64c19bc65b35984900e8f734d74facdb9bca2882b981525cc2a5080ed058f4f38b52aea2b", [[], [], [], [], [], [], [], []]}, 0x981) fallocate(r3, 0x0, 0x0, 0x8020001) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) 20:00:36 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 227.290424] Bluetooth: hci0: Frame reassembly failed (-84) 20:00:36 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x44051) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x260002) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000040)={0x0, 0x6, 0x3cf8, 0xe0e0e0e0}) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r3, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0xc0000, 0x0) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000000c0)) 20:00:36 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000040000a0000000c0007000000000000000000000008ca00080000000000080073697000"/65], 0x54}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc71}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x79}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x880) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000100)=0x10) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000080)={0x2, 0xf75, "03fa9e", 0x5}) 20:00:36 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 228.061694] audit: type=1804 audit(1592683236.964:28): pid=10664 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir380958424/syzkaller.BSbrrg/65/file0/file0" dev="loop2" ino=11 res=1 20:00:37 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r5, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) 20:00:37 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) sysinfo(&(0x7f0000000000)=""/87) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11, r1, 0x0) 20:00:37 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, &(0x7f0000000000)={0x0, 0x0, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) fstat(r0, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x76006e) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204200, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x181000, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, r4, 0x1c}, 0x10) sendfile(r1, r2, 0x0, 0x800000080004103) [ 229.304724] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 229.305459] ================================================================== [ 229.305487] BUG: KASAN: use-after-free in hci_cmd_timeout+0x1a8/0x1b0 [ 229.305493] Read of size 8 at addr ffff8880a083cb18 by task kworker/0:3/7408 [ 229.305495] [ 229.305503] CPU: 0 PID: 7408 Comm: kworker/0:3 Not tainted 4.14.184-syzkaller #0 [ 229.305507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.305517] Workqueue: events hci_cmd_timeout [ 229.305522] Call Trace: [ 229.305535] dump_stack+0x1b2/0x283 [ 229.305545] ? hci_cmd_timeout+0x1a8/0x1b0 [ 229.305555] print_address_description.cold+0x54/0x1dc [ 229.305564] ? hci_cmd_timeout+0x1a8/0x1b0 [ 229.305571] kasan_report.cold+0xa9/0x2b9 [ 229.305663] hci_cmd_timeout+0x1a8/0x1b0 [ 229.305673] process_one_work+0x7c0/0x14c0 [ 229.305685] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 229.305691] ? worker_thread+0x163/0x1080 [ 229.305700] ? _raw_spin_unlock_irq+0x24/0x90 [ 229.305710] worker_thread+0x5d7/0x1080 [ 229.305726] ? process_one_work+0x14c0/0x14c0 [ 229.305736] kthread+0x30d/0x420 [ 229.305743] ? kthread_create_on_node+0xd0/0xd0 [ 229.305752] ret_from_fork+0x24/0x30 [ 229.305764] [ 229.305768] Allocated by task 1191: [ 229.305776] kasan_kmalloc.part.0+0x4f/0xd0 [ 229.305782] kmem_cache_alloc+0x124/0x3c0 [ 229.305789] skb_clone+0x126/0x320 [ 229.305794] hci_cmd_work+0xc0/0x230 [ 229.305799] process_one_work+0x7c0/0x14c0 [ 229.305804] worker_thread+0x5d7/0x1080 [ 229.305810] kthread+0x30d/0x420 [ 229.305816] ret_from_fork+0x24/0x30 [ 229.305818] [ 229.305821] Freed by task 10564: [ 229.305828] kasan_slab_free+0xaf/0x190 [ 229.305835] kmem_cache_free+0x7c/0x2b0 [ 229.305841] kfree_skbmem+0x98/0x100 [ 229.305847] kfree_skb+0xb6/0x340 [ 229.305852] hci_dev_do_open+0x7be/0xf00 [ 229.305857] hci_power_on+0x88/0x3d0 [ 229.305862] process_one_work+0x7c0/0x14c0 [ 229.305867] worker_thread+0x5d7/0x1080 [ 229.305873] kthread+0x30d/0x420 [ 229.305878] ret_from_fork+0x24/0x30 [ 229.305880] [ 229.305886] The buggy address belongs to the object at ffff8880a083ca40 [ 229.305886] which belongs to the cache skbuff_head_cache of size 232 [ 229.305892] The buggy address is located 216 bytes inside of [ 229.305892] 232-byte region [ffff8880a083ca40, ffff8880a083cb28) [ 229.305894] The buggy address belongs to the page: [ 229.305901] page:ffffea0002820f00 count:1 mapcount:0 mapping:ffff8880a083c040 index:0xffff8880a083ce00 [ 229.305907] flags: 0xfffe0000000100(slab) [ 229.305917] raw: 00fffe0000000100 ffff8880a083c040 ffff8880a083ce00 0000000100000002 [ 229.305925] raw: ffffea00028462e0 ffffea000282fde0 ffff8880a9eebc00 0000000000000000 [ 229.305928] page dumped because: kasan: bad access detected [ 229.305930] [ 229.305933] Memory state around the buggy address: [ 229.305939] ffff8880a083ca00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 229.305944] ffff8880a083ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.305949] >ffff8880a083cb00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 229.305952] ^ [ 229.305957] ffff8880a083cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.305962] ffff8880a083cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 229.305965] ================================================================== [ 229.305967] Disabling lock debugging due to kernel taint [ 229.305993] Kernel panic - not syncing: panic_on_warn set ... [ 229.305993] [ 229.305999] CPU: 0 PID: 7408 Comm: kworker/0:3 Tainted: G B 4.14.184-syzkaller #0 [ 229.306002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 229.306009] Workqueue: events hci_cmd_timeout [ 229.306013] Call Trace: [ 229.306020] dump_stack+0x1b2/0x283 [ 229.306029] panic+0x1f9/0x42d [ 229.306037] ? add_taint.cold+0x16/0x16 [ 229.306048] ? hci_cmd_timeout+0x1a8/0x1b0 [ 229.306055] kasan_end_report+0x43/0x49 [ 229.306061] kasan_report.cold+0x12f/0x2b9 [ 229.306069] hci_cmd_timeout+0x1a8/0x1b0 [ 229.306075] process_one_work+0x7c0/0x14c0 [ 229.306084] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 229.306088] ? worker_thread+0x163/0x1080 [ 229.306095] ? _raw_spin_unlock_irq+0x24/0x90 [ 229.306103] worker_thread+0x5d7/0x1080 [ 229.306112] ? process_one_work+0x14c0/0x14c0 [ 229.306119] kthread+0x30d/0x420 [ 229.306126] ? kthread_create_on_node+0xd0/0xd0 [ 229.306133] ret_from_fork+0x24/0x30 [ 229.308071] Kernel Offset: disabled [ 229.860267] Rebooting in 86400 seconds..