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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:40 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1f, 0x0, 0x9f, 0xff, 0x0, 0x32b2, 0x8020, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53a, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x2000, 0x0, 0x8, 0x7, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xb) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video37\x00', 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000440)) sendmsg(r2, &(0x7f0000000280)={&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xc0e4}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="05e5f51e9baa222f175a699b47bab73ee0baaddd3ef27171587288630abefdf61bee59b9a236b2eef7a712c0b1fc3fdce6a31d5f2494570fc79a8c72a9e3a0445a83c0a0273541194c3cb4ab272470edf2688651e83602748a0f73f21685d38c7c7554fa59374f90a86f8b0a2efc7fc8c0179ac7ab89b0b944079776653ba095c19388f604a30ac17bc7d8b7", 0x8c}], 0x1, &(0x7f0000000240)=[{0x40, 0x10b, 0x4, "d2e1443044283d6123441d97a921587eeb08a6ddbfe826d5ba5ca8521461178f69934f676d8e6ca04e045de30aa8"}], 0x40}, 0x20000004) sendfile(r1, r2, 0x0, 0x50000000000443) [ 1032.089690] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1032.104666] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1032.119273] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1032.135834] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.1280 filesystem [ 1032.151983] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1032.168484] squashfs: SQUASHFS error: Please update your kernel [ 1032.176558] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1032.190042] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1032.214373] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1032.224404] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1032.234982] ubi0: background thread "ubi_bgt0d" started, PID 13469 [ 1032.244541] ubi: mtd0 is already attached to ubi0 [ 1032.249785] ubi0: detaching mtd0 [ 1032.263720] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1032.272822] ubi0: mtd0 is detached 04:53:40 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c0000", 0x8}], 0x8) 04:53:40 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {0x0}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1032.287341] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.1280 filesystem [ 1032.299367] ubi0: attaching mtd0 [ 1032.303493] ubi0: scanning is finished [ 1032.314213] squashfs: SQUASHFS error: Please update your kernel 04:53:41 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1032.413647] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1032.425837] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1032.434823] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1032.450453] ubi0: VID header offset: 64 (aligned 64), data offset: 128 04:53:41 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x4500, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1032.475623] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1032.482349] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.1536 filesystem [ 1032.498152] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1032.505474] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:53:41 executing program 4: ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) [ 1032.522415] squashfs: SQUASHFS error: Please update your kernel [ 1032.532485] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1032.548716] ubi0: background thread "ubi_bgt0d" started, PID 13493 [ 1032.555160] ubi0: detaching mtd0 [ 1032.563163] ubi0: mtd0 is detached [ 1032.568069] ubi0: attaching mtd0 [ 1032.572590] ubi0: scanning is finished 04:53:41 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {0x0}, {0x0}], 0x8) [ 1032.601445] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.1536 filesystem [ 1032.621096] squashfs: SQUASHFS error: Please update your kernel [ 1032.674709] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1032.682183] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 04:53:41 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000071e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1032.729883] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1032.769801] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1032.797054] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1032.807104] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1032.814224] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1032.820240] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.1792 filesystem [ 1032.846546] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1032.850473] squashfs: SQUASHFS error: Please update your kernel [ 1032.861629] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 04:53:41 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x4600, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1032.891464] ubi0: background thread "ubi_bgt0d" started, PID 13516 [ 1032.917711] ubi: mtd0 is already attached to ubi0 [ 1032.925674] ubi0: detaching mtd0 [ 1032.972775] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.1792 filesystem [ 1032.990233] ubi0: mtd0 is detached [ 1032.998504] squashfs: SQUASHFS error: Please update your kernel [ 1033.007750] ubi0: attaching mtd0 04:53:41 executing program 5: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x1f, 0x0, 0x9f, 0xff, 0x0, 0x32b2, 0x8020, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53a, 0x0, @perf_bp={&(0x7f0000000140), 0x4}, 0x2000, 0x0, 0x8, 0x7, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xb) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/nf_conntrack\x00') sendfile(r2, r3, 0x0, 0x50000000000443) 04:53:41 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:41 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {0x0}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1033.026611] ubi0: scanning is finished 04:53:41 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {0x0}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1033.156892] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.2048 filesystem [ 1033.177489] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1033.187962] squashfs: SQUASHFS error: Please update your kernel [ 1033.197407] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1033.213353] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1033.225407] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1033.233826] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1033.253858] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1033.268541] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.2048 filesystem [ 1033.294080] squashfs: SQUASHFS error: Please update your kernel [ 1033.306721] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:53:41 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1033.338474] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1033.349877] ubi0: background thread "ubi_bgt0d" started, PID 13551 [ 1033.364129] ubi0: detaching mtd0 04:53:42 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1033.396899] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1033.416797] ubi0: mtd0 is detached 04:53:42 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {0x0}, {0x0}], 0x8) [ 1033.447051] ubi0: attaching mtd0 [ 1033.451294] ubi0: scanning is finished [ 1033.454383] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.2304 filesystem [ 1033.474923] squashfs: SQUASHFS error: Please update your kernel [ 1033.569578] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1033.577374] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1033.584273] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1033.591844] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1033.602677] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1033.609512] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1033.615536] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.2304 filesystem [ 1033.618321] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1033.638067] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1033.658098] squashfs: SQUASHFS error: Please update your kernel 04:53:42 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x4700, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1033.662693] ubi0: background thread "ubi_bgt0d" started, PID 13580 [ 1033.671120] ubi0: detaching mtd0 04:53:42 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d00002000400000e1e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1033.734516] ubi0: mtd0 is detached [ 1033.747473] ubi0: attaching mtd0 [ 1033.758578] ubi0: scanning is finished [ 1033.773221] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.3584 filesystem 04:53:42 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {0x0}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1033.784241] squashfs: SQUASHFS error: Please update your kernel 04:53:42 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1033.918531] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.4096 filesystem [ 1033.944903] squashfs: SQUASHFS error: Please update your kernel [ 1033.985380] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1034.003826] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.4096 filesystem [ 1034.017667] squashfs: SQUASHFS error: Please update your kernel [ 1034.032701] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1034.043981] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1034.051339] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1034.062789] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 04:53:42 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000141e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1034.085834] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1034.110893] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1034.121905] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1034.133726] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1034.170298] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.5120 filesystem 04:53:42 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x4800, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1034.206909] squashfs: SQUASHFS error: Please update your kernel [ 1034.236133] ubi0: background thread "ubi_bgt0d" started, PID 13615 [ 1034.244314] ubi: mtd0 is already attached to ubi0 [ 1034.250619] ubi0: detaching mtd0 [ 1034.282177] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.5120 filesystem [ 1034.302877] squashfs: SQUASHFS error: Please update your kernel [ 1034.312099] ubi0: mtd0 is detached [ 1034.327200] ubi0: attaching mtd0 [ 1034.331335] ubi0: scanning is finished 04:53:43 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:53:43 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:43 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {0x0}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1034.443250] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1034.475210] ubi0: attaching mtd0 [ 1034.480180] ubi0: scanning is finished 04:53:43 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)}, {0x0}], 0x8) [ 1034.501556] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.5376 filesystem [ 1034.518447] squashfs: SQUASHFS error: Please update your kernel [ 1034.570793] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.5376 filesystem [ 1034.604068] squashfs: SQUASHFS error: Please update your kernel [ 1034.606203] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) 04:53:43 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1034.644614] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1034.672766] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1034.682921] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1034.702666] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1034.704637] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1034.724915] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1034.735214] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1034.745002] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1034.755507] ubi0: background thread "ubi_bgt0d" started, PID 13666 [ 1034.767704] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.6144 filesystem [ 1034.777689] ubi0: detaching mtd0 [ 1034.784577] ubi0: mtd0 is detached [ 1034.788537] ubi0: attaching mtd0 [ 1034.792920] ubi0: scanning is finished 04:53:43 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1034.805060] squashfs: SQUASHFS error: Please update your kernel 04:53:43 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x4900, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1034.879211] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1034.886211] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1034.892809] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1034.899586] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1034.921131] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.6144 filesystem [ 1034.931620] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1034.942310] squashfs: SQUASHFS error: Please update your kernel [ 1034.957490] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1034.973509] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:53:43 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000191e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1035.011605] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1035.071182] ubi0: background thread "ubi_bgt0d" started, PID 13684 [ 1035.078407] ubi0: detaching mtd0 [ 1035.144178] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.6400 filesystem [ 1035.177981] squashfs: SQUASHFS error: Please update your kernel [ 1035.178918] ubi0: mtd0 is detached [ 1035.189552] ubi0: attaching mtd0 [ 1035.193696] ubi0: scanning is finished 04:53:43 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1035.226946] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1035.233564] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1035.243000] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1035.254223] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1035.262888] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1035.273418] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1035.280977] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1035.290904] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.6400 filesystem [ 1035.300625] squashfs: SQUASHFS error: Please update your kernel [ 1035.308608] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1035.338539] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1035.348459] ubi0: background thread "ubi_bgt0d" started, PID 13715 [ 1035.355176] ubi0: detaching mtd0 [ 1035.386708] ubi0: mtd0 is detached [ 1035.393692] ubi0: attaching mtd0 04:53:44 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:44 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)}, {0x0}], 0x8) [ 1035.433600] ubi0: scanning is finished 04:53:44 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x4a00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1035.511849] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.7168 filesystem [ 1035.525869] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1035.541555] squashfs: SQUASHFS error: Please update your kernel [ 1035.577112] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1035.586712] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1035.593099] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1035.601642] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1035.608523] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1035.625979] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1035.643153] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.7168 filesystem [ 1035.663035] squashfs: SQUASHFS error: Please update your kernel 04:53:44 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1035.692374] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1035.703898] ubi0: background thread "ubi_bgt0d" started, PID 13741 [ 1035.711292] ubi0: detaching mtd0 [ 1035.725852] ubi0: mtd0 is detached [ 1035.772981] ubi0: attaching mtd0 [ 1035.779864] ubi0: scanning is finished [ 1035.781454] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1035.786919] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.24576 filesystem 04:53:44 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) [ 1035.852397] squashfs: SQUASHFS error: Please update your kernel [ 1035.872563] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1035.884524] ubi0: attaching mtd0 [ 1035.898384] ubi0: scanning is finished 04:53:44 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x4b00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:44 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1035.937583] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.24576 filesystem [ 1035.965730] squashfs: SQUASHFS error: Please update your kernel 04:53:44 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1036.047242] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1036.068288] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1036.101941] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1036.117637] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1036.131173] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.14080 filesystem [ 1036.142272] squashfs: SQUASHFS error: Please update your kernel [ 1036.150433] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1036.163531] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1036.185394] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1036.196470] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1036.207207] ubi0: detaching mtd0 [ 1036.207683] ubi0: background thread "ubi_bgt0d" started, PID 13779 [ 1036.219578] ubi0: mtd0 is detached [ 1036.223565] ubi0: attaching mtd0 [ 1036.232007] ubi0: scanning is finished [ 1036.243667] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.14080 filesystem 04:53:44 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:44 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) socket$alg(0x26, 0x5, 0x0) [ 1036.261918] squashfs: SQUASHFS error: Please update your kernel [ 1036.270553] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1036.390923] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1036.406552] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.13824 filesystem [ 1036.417299] ubi0: attaching mtd0 [ 1036.421563] ubi0: scanning is finished 04:53:45 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)}, {0x0}], 0x8) 04:53:45 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x4c00, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1036.449596] squashfs: SQUASHFS error: Please update your kernel [ 1036.502097] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1036.509318] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1036.517352] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1036.523694] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1036.532073] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1036.546145] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1036.569817] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1036.571196] squashfs: SQUASHFS error: Major/Minor mismatch, trying to mount newer 4.13824 filesystem [ 1036.587184] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1036.612680] ubi0: background thread "ubi_bgt0d" started, PID 13821 [ 1036.612725] ubi0: detaching mtd0 [ 1036.659982] ubi0: mtd0 is detached [ 1036.680692] squashfs: SQUASHFS error: Please update your kernel [ 1036.686869] ubi0: attaching mtd0 [ 1036.687523] ubi0: scanning is finished 04:53:45 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:53:45 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:45 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) [ 1036.804746] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1036.823491] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1036.840131] SQUASHFS error: xz decompression failed, data probably corrupt [ 1036.854349] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1036.861762] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1036.884748] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1036.884849] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1036.904281] SQUASHFS error: Unable to read metadata cache entry [106] [ 1036.912739] SQUASHFS error: Unable to read inode 0x1cc [ 1036.928672] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1036.938410] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1036.947780] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1036.964395] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1036.987516] SQUASHFS error: xz decompression failed, data probably corrupt [ 1036.994938] ubi0: background thread "ubi_bgt0d" started, PID 13841 04:53:45 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x4d00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:45 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1036.994968] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1036.994994] SQUASHFS error: Unable to read metadata cache entry [106] [ 1037.001805] ubi0: detaching mtd0 [ 1037.012492] ubi0: mtd0 is detached [ 1037.027013] SQUASHFS error: Unable to read inode 0x1cc [ 1037.038474] ubi0: attaching mtd0 [ 1037.042586] ubi0: scanning is finished 04:53:45 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) socket$alg(0x26, 0x5, 0x0) [ 1037.179320] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1037.183192] SQUASHFS error: xz decompression failed, data probably corrupt [ 1037.210175] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1037.229367] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1037.236415] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1037.243592] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1037.252260] SQUASHFS error: Unable to read metadata cache entry [106] [ 1037.259582] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1037.266408] SQUASHFS error: Unable to read inode 0x1ff [ 1037.271915] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1037.285060] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1037.295213] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1037.305447] ubi0: background thread "ubi_bgt0d" started, PID 13870 [ 1037.313359] ubi0: detaching mtd0 04:53:46 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70", 0x2c}, {0x0}], 0x8) [ 1037.335796] ubi0: mtd0 is detached [ 1037.339630] ubi0: attaching mtd0 [ 1037.347887] ubi0: scanning is finished [ 1037.360730] SQUASHFS error: xz decompression failed, data probably corrupt [ 1037.372742] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1037.390517] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1037.404627] SQUASHFS error: Unable to read metadata cache entry [106] [ 1037.413528] SQUASHFS error: Unable to read inode 0x1ff [ 1037.442310] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1037.452465] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1037.467468] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1037.473966] ubi0: VID header offset: 64 (aligned 64), data offset: 128 04:53:46 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1037.489884] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1037.503740] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1037.519485] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:53:46 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x4e00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1037.561313] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1037.573448] ubi0: background thread "ubi_bgt0d" started, PID 13887 [ 1037.581731] ubi0: detaching mtd0 [ 1037.621847] ubi0: mtd0 is detached [ 1037.640838] ubi0: attaching mtd0 [ 1037.648511] ubi0: scanning is finished [ 1037.658163] SQUASHFS error: xz decompression failed, data probably corrupt 04:53:46 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296", 0x56}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1037.687209] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1037.717884] SQUASHFS error: Unable to read metadata cache entry [106] [ 1037.737891] SQUASHFS error: Unable to read inode 0x1cc 04:53:46 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) [ 1037.760783] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1037.773560] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1037.781261] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1037.788696] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1037.796380] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1037.813002] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1037.825091] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1037.839797] SQUASHFS error: xz decompression failed, data probably corrupt [ 1037.850145] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1037.858247] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1037.869061] SQUASHFS error: Unable to read metadata cache entry [106] [ 1037.876489] ubi0: background thread "ubi_bgt0d" started, PID 13909 [ 1037.883217] SQUASHFS error: Unable to read inode 0x1cc [ 1037.883324] ubi0: detaching mtd0 04:53:46 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1037.960563] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1037.980079] ubi0: mtd0 is detached [ 1037.999817] ubi0: attaching mtd0 [ 1038.004037] ubi0: scanning is finished 04:53:46 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) socket$alg(0x26, 0x5, 0x0) [ 1038.090786] SQUASHFS error: xz decompression failed, data probably corrupt [ 1038.103707] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1038.113475] SQUASHFS error: Unable to read metadata cache entry [106] [ 1038.128030] SQUASHFS error: Unable to read inode 0x2000 04:53:46 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x4f00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1038.155413] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1038.164664] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1038.173715] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1038.181896] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1038.189216] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1038.196366] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1038.211706] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1038.222567] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1038.232894] ubi0: background thread "ubi_bgt0d" started, PID 13935 [ 1038.242671] ubi0: detaching mtd0 [ 1038.277180] ubi0: mtd0 is detached [ 1038.289133] ubi0: attaching mtd0 [ 1038.293286] ubi0: scanning is finished [ 1038.293948] SQUASHFS error: xz decompression failed, data probably corrupt 04:53:46 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70", 0x2c}, {0x0}], 0x8) [ 1038.321785] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1038.370594] SQUASHFS error: Unable to read metadata cache entry [106] [ 1038.396903] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1038.403810] SQUASHFS error: Unable to read inode 0x2000 04:53:47 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000003736000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1038.454566] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1038.477130] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1038.490546] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1038.497912] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1038.504613] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1038.515873] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1038.525956] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1038.535736] ubi0: background thread "ubi_bgt0d" started, PID 13953 [ 1038.543056] ubi0: detaching mtd0 04:53:47 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296", 0x56}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:53:47 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70", 0x2c}, {0x0}], 0x8) [ 1038.567402] ubi0: mtd0 is detached [ 1038.575774] ubi0: attaching mtd0 [ 1038.579462] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1038.588217] ubi0: scanning is finished 04:53:47 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1038.680258] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1038.699346] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1038.715511] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 04:53:47 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5000, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1038.740072] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1038.748983] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1038.763462] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1038.774573] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:53:47 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1038.799566] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1038.813804] ubi0: background thread "ubi_bgt0d" started, PID 13973 [ 1038.815359] ubi0: detaching mtd0 [ 1038.863769] ubi0: mtd0 is detached [ 1038.871709] ubi0: attaching mtd0 [ 1038.883327] ubi0: scanning is finished 04:53:47 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1038.909404] SQUASHFS error: xz decompression failed, data probably corrupt [ 1038.948574] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1038.989299] SQUASHFS error: Unable to read metadata cache entry [106] [ 1039.020493] SQUASHFS error: Unable to read inode 0x21e [ 1039.030489] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1039.053085] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1039.080022] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 04:53:47 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1039.106783] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1039.115218] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1039.123239] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1039.140094] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1039.148820] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1039.182037] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1039.197514] ubi0: background thread "ubi_bgt0d" started, PID 14011 [ 1039.215731] ubi0: detaching mtd0 [ 1039.216646] SQUASHFS error: xz decompression failed, data probably corrupt 04:53:47 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70", 0x2c}, {0x0}], 0x8) [ 1039.227573] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1039.234834] SQUASHFS error: Unable to read metadata cache entry [106] [ 1039.236940] ubi0: mtd0 is detached [ 1039.243417] SQUASHFS error: Unable to read inode 0x31e [ 1039.250646] ubi0: attaching mtd0 [ 1039.255152] ubi0: scanning is finished 04:53:47 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5100, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1039.327935] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1039.337126] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1039.358539] SQUASHFS error: xz decompression failed, data probably corrupt [ 1039.365873] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1039.372362] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1039.380881] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1039.393786] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1039.402507] SQUASHFS error: Unable to read metadata cache entry [106] [ 1039.412446] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1039.431890] SQUASHFS error: Unable to read inode 0x31e [ 1039.441011] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1039.459946] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1039.470291] ubi0: background thread "ubi_bgt0d" started, PID 14025 04:53:48 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1039.478649] ubi: mtd0 is already attached to ubi0 04:53:48 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296", 0x56}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1039.516411] ubi0: detaching mtd0 [ 1039.534798] ubi0: mtd0 is detached [ 1039.539867] ubi0: attaching mtd0 [ 1039.544543] ubi0: scanning is finished [ 1039.642730] SQUASHFS error: xz decompression failed, data probably corrupt [ 1039.656172] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1039.674258] SQUASHFS error: Unable to read metadata cache entry [106] [ 1039.681093] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 04:53:48 executing program 4: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1039.695177] SQUASHFS error: Unable to read inode 0x41e [ 1039.711456] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1039.735028] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1039.752928] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1039.760324] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1039.768426] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1039.774616] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1039.783044] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:53:48 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5200, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1039.805868] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1039.818660] ubi0: background thread "ubi_bgt0d" started, PID 14057 [ 1039.825140] ubi0: detaching mtd0 [ 1039.832256] ubi0: mtd0 is detached [ 1039.840657] ubi0: attaching mtd0 [ 1039.855269] ubi0: scanning is finished 04:53:48 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1039.876857] SQUASHFS error: xz decompression failed, data probably corrupt [ 1039.905778] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1039.941398] SQUASHFS error: Unable to read metadata cache entry [106] [ 1039.957369] SQUASHFS error: Unable to read inode 0x41e [ 1039.971293] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1039.982566] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 04:53:48 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1040.004796] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1040.026812] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1040.033745] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 04:53:48 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1040.064240] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1040.083542] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1040.103990] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1040.115170] ubi0: background thread "ubi_bgt0d" started, PID 14074 [ 1040.121835] ubi0: detaching mtd0 [ 1040.162279] SQUASHFS error: xz decompression failed, data probably corrupt [ 1040.166900] ubi0: mtd0 is detached [ 1040.174870] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1040.195566] ubi0: attaching mtd0 [ 1040.200568] ubi0: scanning is finished 04:53:48 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446", 0x42}, {0x0}], 0x8) [ 1040.219641] SQUASHFS error: Unable to read metadata cache entry [106] [ 1040.253332] SQUASHFS error: Unable to read inode 0x51e [ 1040.266563] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1040.299082] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1040.318353] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1040.324904] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1040.334867] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1040.356695] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1040.363433] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1040.378929] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1040.395200] SQUASHFS error: xz decompression failed, data probably corrupt [ 1040.412143] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1040.422760] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1040.439057] SQUASHFS error: Unable to read metadata cache entry [106] [ 1040.448680] ubi0: background thread "ubi_bgt0d" started, PID 14101 04:53:49 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5300, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:49 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725", 0x81}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1040.462519] ubi0: detaching mtd0 [ 1040.468914] ubi0: mtd0 is detached [ 1040.473622] SQUASHFS error: Unable to read inode 0x51e [ 1040.481759] ubi0: attaching mtd0 [ 1040.492986] ubi0: scanning is finished 04:53:49 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1040.582727] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1040.602506] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1040.613921] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1040.624601] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1040.659915] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1040.677678] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1040.699449] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1040.704736] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1040.724254] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1040.732683] SQUASHFS error: xz decompression failed, data probably corrupt [ 1040.736177] ubi0: background thread "ubi_bgt0d" started, PID 14120 [ 1040.750642] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1040.754370] ubi0: detaching mtd0 [ 1040.767568] SQUASHFS error: Unable to read metadata cache entry [106] [ 1040.767577] SQUASHFS error: Unable to read inode 0x61e [ 1040.799889] ubi0: mtd0 is detached 04:53:49 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1040.822213] ubi0: attaching mtd0 [ 1040.834185] ubi0: scanning is finished [ 1040.854749] SQUASHFS error: xz decompression failed, data probably corrupt 04:53:49 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5400, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1040.880323] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1040.911828] SQUASHFS error: Unable to read metadata cache entry [106] [ 1040.938168] SQUASHFS error: Unable to read inode 0x61e 04:53:49 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1040.960415] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1040.972740] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1040.987261] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 04:53:49 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1041.011205] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1041.031896] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1041.051769] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1041.061915] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1041.075868] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1041.104078] SQUASHFS error: xz decompression failed, data probably corrupt [ 1041.115140] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1041.127107] ubi0: background thread "ubi_bgt0d" started, PID 14145 [ 1041.131127] SQUASHFS error: Unable to read metadata cache entry [106] [ 1041.133653] ubi0: detaching mtd0 [ 1041.144915] SQUASHFS error: Unable to read inode 0x71e [ 1041.164552] ubi0: mtd0 is detached [ 1041.176330] ubi0: attaching mtd0 [ 1041.181050] ubi0: scanning is finished 04:53:49 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446", 0x42}, {0x0}], 0x8) [ 1041.229349] SQUASHFS error: xz decompression failed, data probably corrupt [ 1041.253402] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1041.258614] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1041.287797] SQUASHFS error: Unable to read metadata cache entry [106] [ 1041.295068] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1041.308560] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1041.318278] SQUASHFS error: Unable to read inode 0x71e [ 1041.324216] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1041.341373] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1041.350093] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1041.358546] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1041.368872] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 04:53:50 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1041.391521] ubi0: detaching mtd0 [ 1041.393761] ubi0: background thread "ubi_bgt0d" started, PID 14168 [ 1041.404258] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1041.425923] ubi0: mtd0 is detached [ 1041.429702] ubi0: attaching mtd0 [ 1041.452415] ubi0: scanning is finished 04:53:50 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725", 0x81}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:53:50 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5500, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1041.561904] SQUASHFS error: xz decompression failed, data probably corrupt [ 1041.569803] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1041.585269] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1041.598984] SQUASHFS error: Unable to read metadata cache entry [106] [ 1041.614510] SQUASHFS error: Unable to read inode 0x81e [ 1041.620870] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1041.642407] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1041.653791] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1041.664123] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1041.674200] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1041.681975] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1041.693344] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1041.702871] ubi0: detaching mtd0 [ 1041.703635] ubi0: background thread "ubi_bgt0d" started, PID 14193 [ 1041.722231] SQUASHFS error: xz decompression failed, data probably corrupt [ 1041.729692] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1041.738188] SQUASHFS error: Unable to read metadata cache entry [106] [ 1041.744886] SQUASHFS error: Unable to read inode 0x81e [ 1041.767248] ubi0: mtd0 is detached 04:53:50 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) r1 = socket$alg(0x26, 0x5, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1041.771726] ubi0: attaching mtd0 [ 1041.777144] ubi0: scanning is finished 04:53:50 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1041.896576] SQUASHFS error: xz decompression failed, data probably corrupt [ 1041.899871] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1041.903879] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1041.903900] SQUASHFS error: Unable to read metadata cache entry [106] [ 1041.903909] SQUASHFS error: Unable to read inode 0x101e [ 1041.934652] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1041.942241] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1041.949598] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1041.957080] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1041.964053] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1041.988135] SQUASHFS error: xz decompression failed, data probably corrupt [ 1041.996092] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1042.012144] SQUASHFS error: Unable to read metadata cache entry [106] [ 1042.012271] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1042.020098] SQUASHFS error: Unable to read inode 0x101e 04:53:50 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e14000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1042.054989] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1042.068495] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1042.079245] ubi0: background thread "ubi_bgt0d" started, PID 14216 [ 1042.094985] ubi0: detaching mtd0 [ 1042.131002] ubi0: mtd0 is detached [ 1042.134689] ubi0: attaching mtd0 [ 1042.142906] ubi0: scanning is finished 04:53:50 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5600, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1042.220988] SQUASHFS error: xz decompression failed, data probably corrupt [ 1042.242881] SQUASHFS error: squashfs_read_data failed to read block 0x106 [ 1042.253797] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 04:53:50 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:53:50 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446", 0x42}, {0x0}], 0x8) [ 1042.274091] SQUASHFS error: Unable to read metadata cache entry [106] [ 1042.279022] ubi0: attaching mtd0 [ 1042.284824] ubi0: scanning is finished [ 1042.303096] SQUASHFS error: Unable to read inode 0x141e [ 1042.383587] SQUASHFS error: xz decompression failed, data probably corrupt [ 1042.412153] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1042.413258] SQUASHFS error: squashfs_read_data failed to read block 0x106 04:53:51 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725", 0x81}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1042.444053] ubi0: attaching mtd0 [ 1042.449145] ubi0: scanning is finished [ 1042.450511] SQUASHFS error: Unable to read metadata cache entry [106] [ 1042.479479] SQUASHFS error: Unable to read inode 0x141e 04:53:51 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1042.611929] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1042.619316] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1042.635692] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1042.640189] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1042.669302] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1042.683411] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1042.693004] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 04:53:51 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1042.711908] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1042.723348] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1042.740322] ubi0: background thread "ubi_bgt0d" started, PID 14271 [ 1042.740336] ubi: mtd0 is already attached to ubi0 04:53:51 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5700, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:51 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) r1 = socket$alg(0x26, 0x5, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1042.774931] ubi0: detaching mtd0 [ 1042.837188] ubi0: mtd0 is detached 04:53:51 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850", 0x4d}, {0x0}], 0x8) [ 1042.858585] ubi0: attaching mtd0 [ 1042.862657] ubi0: scanning is finished [ 1042.955114] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1042.963324] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1042.971380] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1042.978735] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1042.986434] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1042.992720] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 04:53:51 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e3e010000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1043.012470] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:53:51 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1043.090860] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1043.104329] ubi: mtd0 is already attached to ubi0 [ 1043.106155] ubi0: background thread "ubi_bgt0d" started, PID 14304 [ 1043.116716] ubi0: detaching mtd0 [ 1043.170466] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1043.198120] SQUASHFS error: squashfs_read_data failed to read block 0x109 [ 1043.214495] SQUASHFS error: Unable to read metadata cache entry [109] [ 1043.221705] ubi0: mtd0 is detached [ 1043.223447] SQUASHFS error: Unable to read inode 0x3001e [ 1043.242867] ubi0: attaching mtd0 04:53:51 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00", 0x96}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1043.271420] ubi0: scanning is finished [ 1043.278102] SQUASHFS error: squashfs_read_data failed to read block 0x109 [ 1043.293735] SQUASHFS error: Unable to read metadata cache entry [109] 04:53:51 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725", 0x81}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1043.322092] SQUASHFS error: Unable to read inode 0x3001e 04:53:52 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:52 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5800, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1043.387823] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1043.394956] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1043.413809] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1043.434004] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1043.451795] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1043.468180] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1043.501127] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1043.502816] SQUASHFS error: squashfs_read_data failed to read block 0x10b [ 1043.534149] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1043.539586] SQUASHFS error: Unable to read metadata cache entry [10b] 04:53:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) r1 = socket$alg(0x26, 0x5, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1043.551818] SQUASHFS error: Unable to read inode 0x5001e [ 1043.561219] ubi0: background thread "ubi_bgt0d" started, PID 14343 [ 1043.571149] ubi: mtd0 is already attached to ubi0 [ 1043.578320] ubi0: detaching mtd0 [ 1043.651609] ubi0: mtd0 is detached [ 1043.664729] SQUASHFS error: squashfs_read_data failed to read block 0x10b [ 1043.677158] ubi0: attaching mtd0 [ 1043.682196] ubi0: scanning is finished 04:53:52 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850", 0x4d}, {0x0}], 0x8) [ 1043.704385] SQUASHFS error: Unable to read metadata cache entry [10b] [ 1043.752270] SQUASHFS error: Unable to read inode 0x5001e [ 1043.791009] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) 04:53:52 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1043.801010] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1043.812748] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1043.822782] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1043.834908] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1043.844785] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1043.857890] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1043.869178] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1043.879382] ubi0: background thread "ubi_bgt0d" started, PID 14372 [ 1043.879427] ubi: mtd0 is already attached to ubi0 [ 1043.890865] ubi0: detaching mtd0 [ 1043.905287] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1043.919357] ubi0: mtd0 is detached [ 1043.923497] ubi0: attaching mtd0 [ 1043.928917] ubi0: scanning is finished 04:53:52 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00", 0x96}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1043.989264] SQUASHFS error: xz decompression failed, data probably corrupt [ 1044.038099] SQUASHFS error: squashfs_read_data failed to read block 0x10c [ 1044.059925] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1044.077844] SQUASHFS error: Unable to read metadata cache entry [10c] 04:53:52 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5900, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1044.091445] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1044.104678] SQUASHFS error: Unable to read inode 0x6001e [ 1044.118527] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 04:53:52 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) [ 1044.139775] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1044.172788] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1044.199732] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1044.210390] SQUASHFS error: xz decompression failed, data probably corrupt [ 1044.224716] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1044.246301] SQUASHFS error: squashfs_read_data failed to read block 0x10c [ 1044.268969] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1044.289461] SQUASHFS error: Unable to read metadata cache entry [10c] [ 1044.314229] SQUASHFS error: Unable to read inode 0x6001e [ 1044.340189] ubi0: background thread "ubi_bgt0d" started, PID 14389 [ 1044.347560] ubi: mtd0 is already attached to ubi0 [ 1044.352808] ubi0: detaching mtd0 04:53:53 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e00070000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1044.404771] ubi0: mtd0 is detached 04:53:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1044.426620] ubi0: attaching mtd0 [ 1044.445908] ubi0: scanning is finished 04:53:53 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850", 0x4d}, {0x0}], 0x8) [ 1044.542699] SQUASHFS error: squashfs_read_data failed to read block 0x10d [ 1044.578938] SQUASHFS error: Unable to read metadata cache entry [10d] [ 1044.611833] SQUASHFS error: Unable to read inode 0x7001e [ 1044.630962] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1044.649441] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1044.676191] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1044.691398] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1044.711027] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1044.725935] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1044.732513] SQUASHFS error: squashfs_read_data failed to read block 0x10d [ 1044.748375] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1044.763103] SQUASHFS error: Unable to read metadata cache entry [10d] [ 1044.775314] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1044.796702] SQUASHFS error: Unable to read inode 0x7001e 04:53:53 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1044.817892] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1044.837335] ubi0: background thread "ubi_bgt0d" started, PID 14421 [ 1044.843998] ubi0: detaching mtd0 [ 1044.859813] ubi0: mtd0 is detached [ 1044.868488] ubi0: attaching mtd0 [ 1044.873069] ubi0: scanning is finished 04:53:53 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00", 0x96}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:53:53 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5a00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1044.999669] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1045.009052] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1045.034715] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1045.056944] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1045.080202] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1045.082851] SQUASHFS error: squashfs_read_data failed to read block 0x10f [ 1045.110602] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1045.124094] SQUASHFS error: Unable to read metadata cache entry [10f] [ 1045.138964] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1045.149478] SQUASHFS error: Unable to read inode 0x9001e [ 1045.180302] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1045.228143] SQUASHFS error: squashfs_read_data failed to read block 0x10f [ 1045.235330] SQUASHFS error: Unable to read metadata cache entry [10f] [ 1045.239767] ubi0: detaching mtd0 [ 1045.241956] ubi0: background thread "ubi_bgt0d" started, PID 14441 [ 1045.242026] SQUASHFS error: Unable to read inode 0x9001e [ 1045.313381] ubi0: mtd0 is detached 04:53:53 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1045.403190] ubi0: attaching mtd0 [ 1045.407765] ubi0: scanning is finished [ 1045.470834] SQUASHFS error: squashfs_read_data failed to read block 0x110 [ 1045.491143] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1045.502347] SQUASHFS error: Unable to read metadata cache entry [110] [ 1045.512572] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1045.521658] SQUASHFS error: Unable to read inode 0xa001e [ 1045.555066] ubi0: attaching mtd0 [ 1045.559755] ubi0: scanning is finished 04:53:54 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:53:54 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73", 0x52}, {0x0}], 0x8) [ 1045.606274] SQUASHFS error: squashfs_read_data failed to read block 0x110 [ 1045.632695] SQUASHFS error: Unable to read metadata cache entry [110] [ 1045.647056] SQUASHFS error: Unable to read inode 0xa001e 04:53:54 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) 04:53:54 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5b00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:54 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1045.751346] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1045.784483] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1045.818941] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1045.839864] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1045.862759] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1045.888117] SQUASHFS error: squashfs_read_data failed to read block 0x111 [ 1045.890220] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1045.912360] SQUASHFS error: Unable to read metadata cache entry [111] [ 1045.954726] SQUASHFS error: Unable to read inode 0xb001e [ 1045.959083] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1046.013068] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1046.044497] ubi0: background thread "ubi_bgt0d" started, PID 14488 [ 1046.051034] ubi0: detaching mtd0 [ 1046.063386] ubi0: mtd0 is detached [ 1046.080893] ubi0: attaching mtd0 [ 1046.092596] ubi0: scanning is finished [ 1046.124436] SQUASHFS error: squashfs_read_data failed to read block 0x111 04:53:54 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1046.180549] SQUASHFS error: Unable to read metadata cache entry [111] [ 1046.203881] SQUASHFS error: Unable to read inode 0xb001e 04:53:54 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1046.225227] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1046.233773] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1046.242235] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1046.259162] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1046.269476] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1046.284649] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1046.301238] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1046.308838] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1046.319540] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1046.329207] ubi0: background thread "ubi_bgt0d" started, PID 14515 [ 1046.329935] ubi: mtd0 is already attached to ubi0 [ 1046.342278] ubi0: detaching mtd0 [ 1046.452352] ubi0: mtd0 is detached [ 1046.453796] SQUASHFS error: squashfs_read_data failed to read block 0x112 [ 1046.463849] SQUASHFS error: Unable to read metadata cache entry [112] [ 1046.472535] SQUASHFS error: Unable to read inode 0xc001e [ 1046.490810] ubi0: attaching mtd0 04:53:55 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5c00, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:55 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73", 0x52}, {0x0}], 0x8) 04:53:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1046.514286] ubi0: scanning is finished 04:53:55 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) [ 1046.586393] SQUASHFS error: squashfs_read_data failed to read block 0x112 [ 1046.603975] SQUASHFS error: Unable to read metadata cache entry [112] [ 1046.621091] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1046.625391] SQUASHFS error: Unable to read inode 0xc001e [ 1046.633060] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 04:53:55 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e000d0000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1046.663368] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1046.678829] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1046.717178] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1046.745747] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1046.763125] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1046.774514] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1046.801471] SQUASHFS error: squashfs_read_data failed to read block 0x113 [ 1046.817079] ubi0: background thread "ubi_bgt0d" started, PID 14547 [ 1046.823919] ubi0: detaching mtd0 [ 1046.843298] SQUASHFS error: Unable to read metadata cache entry [113] 04:53:55 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1046.870599] SQUASHFS error: Unable to read inode 0xd001e [ 1046.871114] ubi0: mtd0 is detached [ 1046.896096] ubi0: attaching mtd0 [ 1046.901271] ubi0: scanning is finished [ 1046.945075] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1046.962388] SQUASHFS error: squashfs_read_data failed to read block 0x113 [ 1046.995384] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1047.005589] SQUASHFS error: Unable to read metadata cache entry [113] [ 1047.023058] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1047.034488] SQUASHFS error: Unable to read inode 0xd001e [ 1047.042276] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1047.057296] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1047.065903] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1047.072436] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1047.080496] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:53:55 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5d00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:55 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1047.090150] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1047.100126] ubi0: background thread "ubi_bgt0d" started, PID 14574 [ 1047.106992] ubi: mtd0 is already attached to ubi0 [ 1047.111994] ubi0: detaching mtd0 [ 1047.163833] ubi0: mtd0 is detached 04:53:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1047.187075] ubi0: attaching mtd0 [ 1047.191194] ubi0: scanning is finished 04:53:55 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73", 0x52}, {0x0}], 0x8) 04:53:55 executing program 4: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1047.262506] SQUASHFS error: squashfs_read_data failed to read block 0x114 [ 1047.310593] SQUASHFS error: Unable to read metadata cache entry [114] [ 1047.325513] SQUASHFS error: Unable to read inode 0xe001e [ 1047.370549] SQUASHFS error: squashfs_read_data failed to read block 0x114 [ 1047.391761] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1047.391788] SQUASHFS error: Unable to read metadata cache entry [114] [ 1047.403318] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1047.430118] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1047.445769] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1047.462986] SQUASHFS error: Unable to read inode 0xe001e [ 1047.473485] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 04:53:56 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1047.493597] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1047.518134] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1047.532142] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1047.541965] ubi0: background thread "ubi_bgt0d" started, PID 14604 [ 1047.542101] ubi0: detaching mtd0 [ 1047.600378] ubi0: mtd0 is detached [ 1047.608123] ubi0: attaching mtd0 [ 1047.612218] ubi0: scanning is finished [ 1047.628478] SQUASHFS error: squashfs_read_data failed to read block 0x115 04:53:56 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:53:56 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1047.645348] SQUASHFS error: Unable to read metadata cache entry [115] [ 1047.660228] SQUASHFS error: Unable to read inode 0xf001e [ 1047.683850] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1047.727843] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1047.734873] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1047.741385] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1047.749059] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1047.756889] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1047.763559] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1047.773024] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1047.802469] SQUASHFS error: squashfs_read_data failed to read block 0x115 [ 1047.819795] SQUASHFS error: Unable to read metadata cache entry [115] [ 1047.820513] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1047.842047] SQUASHFS error: Unable to read inode 0xf001e 04:53:56 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5e00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1047.857150] ubi0: background thread "ubi_bgt0d" started, PID 14632 [ 1047.865252] ubi: mtd0 is already attached to ubi0 [ 1047.875352] ubi0: detaching mtd0 [ 1047.913290] ubi0: mtd0 is detached [ 1047.920318] ubi0: attaching mtd0 [ 1047.925570] ubi0: scanning is finished [ 1047.965428] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1047.972222] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1047.984776] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1047.991037] ubi0: VID header offset: 64 (aligned 64), data offset: 128 04:53:56 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:53:56 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:56 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a0", 0x55}, {0x0}], 0x8) [ 1048.013239] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1048.035744] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1048.043395] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1048.062994] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1048.104140] ubi0: background thread "ubi_bgt0d" started, PID 14646 [ 1048.111959] ubi: mtd0 is already attached to ubi0 [ 1048.118252] SQUASHFS error: squashfs_read_data failed to read block 0x117 [ 1048.133244] SQUASHFS error: Unable to read metadata cache entry [117] [ 1048.146983] ubi0: detaching mtd0 [ 1048.183085] SQUASHFS error: Unable to read inode 0x11001e [ 1048.208963] ubi0: mtd0 is detached [ 1048.214337] ubi0: attaching mtd0 [ 1048.227422] ubi0: scanning is finished 04:53:56 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94", 0xa6}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:53:56 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1048.269738] SQUASHFS error: squashfs_read_data failed to read block 0x117 [ 1048.294765] SQUASHFS error: Unable to read metadata cache entry [117] [ 1048.322489] SQUASHFS error: Unable to read inode 0x11001e [ 1048.358036] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1048.365278] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1048.373720] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1048.383692] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1048.393208] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1048.406146] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 04:53:57 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e00120000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1048.451781] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1048.482165] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1048.504644] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1048.515427] ubi: mtd0 is already attached to ubi0 [ 1048.523667] ubi0: background thread "ubi_bgt0d" started, PID 14677 [ 1048.534121] ubi0: detaching mtd0 04:53:57 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x5f00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1048.593505] SQUASHFS error: squashfs_read_data failed to read block 0x118 [ 1048.619803] SQUASHFS error: Unable to read metadata cache entry [118] [ 1048.630295] ubi0: mtd0 is detached [ 1048.636908] ubi0: attaching mtd0 [ 1048.642482] ubi0: scanning is finished 04:53:57 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a0", 0x55}, {0x0}], 0x8) 04:53:57 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1048.674591] SQUASHFS error: Unable to read inode 0x12001e [ 1048.722030] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1048.729102] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1048.738170] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1048.749873] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1048.762543] SQUASHFS error: squashfs_read_data failed to read block 0x118 [ 1048.783285] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1048.794424] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1048.801755] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1048.819901] SQUASHFS error: Unable to read metadata cache entry [118] [ 1048.829721] SQUASHFS error: Unable to read inode 0x12001e [ 1048.840779] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1048.862532] ubi0: background thread "ubi_bgt0d" started, PID 14706 04:53:57 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1048.871005] ubi: mtd0 is already attached to ubi0 [ 1048.883851] ubi0: detaching mtd0 [ 1048.975901] ubi0: mtd0 is detached [ 1048.989179] ubi0: attaching mtd0 [ 1049.013528] ubi0: scanning is finished 04:53:57 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94", 0xa6}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1049.033160] SQUASHFS error: squashfs_read_data failed to read block 0x119 [ 1049.073358] SQUASHFS error: Unable to read metadata cache entry [119] 04:53:57 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1049.095597] SQUASHFS error: Unable to read inode 0x13001e [ 1049.117781] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1049.119677] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1049.136451] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1049.155212] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1049.171015] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1049.180496] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1049.208629] SQUASHFS error: squashfs_read_data failed to read block 0x119 [ 1049.225133] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1049.239932] SQUASHFS error: Unable to read metadata cache entry [119] [ 1049.247264] SQUASHFS error: Unable to read inode 0x13001e 04:53:57 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6000, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:57 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1049.273082] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1049.296969] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1049.307037] ubi: mtd0 is already attached to ubi0 [ 1049.307569] ubi0: background thread "ubi_bgt0d" started, PID 14736 [ 1049.312129] ubi0: detaching mtd0 04:53:58 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a0", 0x55}, {0x0}], 0x8) [ 1049.373584] ubi0: mtd0 is detached [ 1049.383656] ubi0: attaching mtd0 [ 1049.397878] ubi0: scanning is finished 04:53:58 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1049.499384] SQUASHFS error: xz decompression failed, data probably corrupt [ 1049.521135] SQUASHFS error: squashfs_read_data failed to read block 0x11a [ 1049.543330] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1049.548555] SQUASHFS error: Unable to read metadata cache entry [11a] [ 1049.558135] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1049.560879] SQUASHFS error: Unable to read inode 0x14001e [ 1049.600557] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1049.620414] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1049.631405] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1049.650254] SQUASHFS error: xz decompression failed, data probably corrupt [ 1049.663058] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1049.673483] SQUASHFS error: squashfs_read_data failed to read block 0x11a [ 1049.688031] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1049.700995] SQUASHFS error: Unable to read metadata cache entry [11a] [ 1049.713500] SQUASHFS error: Unable to read inode 0x14001e [ 1049.713983] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1049.728736] ubi0: background thread "ubi_bgt0d" started, PID 14771 [ 1049.728784] ubi0: detaching mtd0 [ 1049.762175] ubi0: mtd0 is detached 04:53:58 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:58 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94", 0xa6}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1049.782866] ubi0: attaching mtd0 [ 1049.794140] ubi0: scanning is finished [ 1049.814406] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1049.876771] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1049.883841] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1049.890950] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1049.897574] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1049.909936] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1049.917258] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1049.927045] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1049.940113] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1049.955347] ubi0: background thread "ubi_bgt0d" started, PID 14790 [ 1049.955445] ubi0: detaching mtd0 [ 1049.986729] SQUASHFS error: squashfs_read_data failed to read block 0x11b 04:53:58 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6100, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1050.031254] SQUASHFS error: Unable to read metadata cache entry [11b] [ 1050.058257] SQUASHFS error: Unable to read inode 0x15001e [ 1050.091674] ubi0: mtd0 is detached [ 1050.105541] ubi0: attaching mtd0 [ 1050.109982] ubi0: scanning is finished [ 1050.143195] SQUASHFS error: squashfs_read_data failed to read block 0x11b [ 1050.164792] SQUASHFS error: Unable to read metadata cache entry [11b] [ 1050.184451] SQUASHFS error: Unable to read inode 0x15001e [ 1050.205726] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1050.217183] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1050.223898] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1050.239420] ubi0: VID header offset: 64 (aligned 64), data offset: 128 04:53:58 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:58 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1050.251354] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1050.273335] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1050.318110] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1050.333349] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1050.360882] ubi0: background thread "ubi_bgt0d" started, PID 14814 [ 1050.371606] ubi: mtd0 is already attached to ubi0 [ 1050.376951] ubi0: detaching mtd0 [ 1050.383069] ubi0: mtd0 is detached [ 1050.394477] ubi0: attaching mtd0 [ 1050.403530] ubi0: scanning is finished [ 1050.422645] SQUASHFS error: xz decompression failed, data probably corrupt [ 1050.460101] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 04:53:59 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a065", 0x56}, {0x0}], 0x8) 04:53:59 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1050.468352] SQUASHFS error: squashfs_read_data failed to read block 0x11c [ 1050.523129] SQUASHFS error: Unable to read metadata cache entry [11c] [ 1050.549184] SQUASHFS error: Unable to read inode 0x16001e 04:53:59 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6200, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1050.569814] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1050.581232] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1050.608941] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1050.621107] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1050.628534] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1050.634832] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1050.642183] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1050.654186] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1050.670189] ubi0: background thread "ubi_bgt0d" started, PID 14839 [ 1050.670259] ubi0: detaching mtd0 [ 1050.698426] SQUASHFS error: xz decompression failed, data probably corrupt 04:53:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7", 0xa9}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1050.721232] ubi0: mtd0 is detached [ 1050.726753] ubi0: attaching mtd0 [ 1050.733551] SQUASHFS error: squashfs_read_data failed to read block 0x11c [ 1050.749135] ubi0: scanning is finished [ 1050.783786] SQUASHFS error: Unable to read metadata cache entry [11c] [ 1050.800692] SQUASHFS error: Unable to read inode 0x16001e 04:53:59 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1050.878327] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1050.905222] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1050.911966] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1050.919627] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1050.926956] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1050.933255] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1050.952868] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1050.972121] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1050.984657] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1050.994929] ubi0: background thread "ubi_bgt0d" started, PID 14862 [ 1050.994935] ubi0: detaching mtd0 [ 1051.015121] SQUASHFS error: squashfs_read_data failed to read block 0x11d [ 1051.022244] SQUASHFS error: Unable to read metadata cache entry [11d] 04:53:59 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6300, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1051.047878] SQUASHFS error: Unable to read inode 0x17001e [ 1051.077942] ubi0: mtd0 is detached [ 1051.082357] ubi0: attaching mtd0 [ 1051.087722] ubi0: scanning is finished 04:53:59 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:53:59 executing program 4: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1051.130788] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1051.148810] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1051.161849] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1051.172423] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1051.181266] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1051.188495] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1051.220152] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1051.261266] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1051.290506] SQUASHFS error: squashfs_read_data failed to read block 0x11e [ 1051.298892] ubi0: background thread "ubi_bgt0d" started, PID 14878 [ 1051.305485] ubi: mtd0 is already attached to ubi0 04:54:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a065", 0x56}, {0x0}], 0x8) [ 1051.310376] ubi0: detaching mtd0 [ 1051.318901] SQUASHFS error: Unable to read metadata cache entry [11e] [ 1051.327678] ubi0: mtd0 is detached [ 1051.331731] SQUASHFS error: Unable to read inode 0x18001e [ 1051.332322] ubi0: attaching mtd0 [ 1051.350257] ubi0: scanning is finished [ 1051.410089] SQUASHFS error: squashfs_read_data failed to read block 0x11e [ 1051.417266] SQUASHFS error: Unable to read metadata cache entry [11e] [ 1051.430888] SQUASHFS error: Unable to read inode 0x18001e [ 1051.439100] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) 04:54:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94", 0xa6}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1051.460662] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1051.481918] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1051.498065] ubi0: VID header offset: 64 (aligned 64), data offset: 128 04:54:00 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1051.512066] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1051.536478] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1051.561365] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1051.588230] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1051.603777] SQUASHFS error: squashfs_read_data failed to read block 0x11f [ 1051.621568] ubi0: background thread "ubi_bgt0d" started, PID 14903 [ 1051.628162] ubi0: detaching mtd0 [ 1051.647181] SQUASHFS error: Unable to read metadata cache entry [11f] [ 1051.656476] ubi0: mtd0 is detached [ 1051.660230] ubi0: attaching mtd0 [ 1051.665362] ubi0: scanning is finished 04:54:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7", 0xa9}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1051.666017] SQUASHFS error: Unable to read inode 0x19001e [ 1051.723232] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1051.730152] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1051.778273] SQUASHFS error: squashfs_read_data failed to read block 0x11f [ 1051.780280] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1051.802402] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1051.803524] SQUASHFS error: Unable to read metadata cache entry [11f] [ 1051.813555] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1051.825491] SQUASHFS error: Unable to read inode 0x19001e [ 1051.827135] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1051.839679] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1051.847638] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1051.858808] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1051.887489] ubi0: background thread "ubi_bgt0d" started, PID 14924 [ 1051.904569] ubi: mtd0 is already attached to ubi0 [ 1051.909546] ubi0: detaching mtd0 [ 1051.919539] ubi0: mtd0 is detached [ 1051.937642] ubi0: attaching mtd0 04:54:00 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a065", 0x56}, {0x0}], 0x8) [ 1051.992464] ubi0: scanning is finished 04:54:00 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6400, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1052.049978] SQUASHFS error: squashfs_read_data failed to read block 0x120 [ 1052.065951] SQUASHFS error: Unable to read metadata cache entry [120] [ 1052.082813] SQUASHFS error: Unable to read inode 0x1a001e [ 1052.156555] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1052.167850] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1052.179146] SQUASHFS error: squashfs_read_data failed to read block 0x120 [ 1052.181670] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1052.187077] SQUASHFS error: Unable to read metadata cache entry [120] [ 1052.200212] SQUASHFS error: Unable to read inode 0x1a001e 04:54:00 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1052.201744] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1052.236022] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1052.242548] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1052.250953] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1052.293481] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1052.313407] ubi0: background thread "ubi_bgt0d" started, PID 14960 [ 1052.313477] ubi0: detaching mtd0 [ 1052.359389] SQUASHFS error: squashfs_read_data failed to read block 0x121 [ 1052.391649] SQUASHFS error: Unable to read metadata cache entry [121] [ 1052.403714] SQUASHFS error: Unable to read inode 0x1b001e [ 1052.408379] ubi0: mtd0 is detached [ 1052.439008] ubi0: attaching mtd0 [ 1052.443167] ubi0: scanning is finished 04:54:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7", 0xa9}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1052.482076] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1052.484335] SQUASHFS error: squashfs_read_data failed to read block 0x121 [ 1052.506793] SQUASHFS error: Unable to read metadata cache entry [121] [ 1052.513456] SQUASHFS error: Unable to read inode 0x1b001e [ 1052.546149] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1052.560131] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1052.574004] Bluetooth: hci1: command 0x0406 tx timeout [ 1052.587994] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 04:54:01 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1052.601357] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1052.613462] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1052.633439] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 04:54:01 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6500, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1052.670258] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1052.712512] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1052.730672] ubi0: background thread "ubi_bgt0d" started, PID 14983 [ 1052.738226] ubi0: detaching mtd0 [ 1052.748678] ubi0: mtd0 is detached [ 1052.752433] ubi0: attaching mtd0 [ 1052.755244] SQUASHFS error: squashfs_read_data failed to read block 0x122 04:54:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7", 0xa9}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1052.758020] ubi0: scanning is finished [ 1052.764777] SQUASHFS error: Unable to read metadata cache entry [122] [ 1052.775714] SQUASHFS error: Unable to read inode 0x1c001e [ 1052.843551] SQUASHFS error: squashfs_read_data failed to read block 0x122 [ 1052.868508] SQUASHFS error: Unable to read metadata cache entry [122] [ 1052.884034] SQUASHFS error: Unable to read inode 0x1c001e [ 1052.916089] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1052.932720] ubi0: attaching mtd0 04:54:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x7) 04:54:01 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:01 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1052.971698] ubi0: scanning is finished [ 1053.063596] SQUASHFS error: squashfs_read_data failed to read block 0x123 [ 1053.081978] SQUASHFS error: Unable to read metadata cache entry [123] [ 1053.100510] SQUASHFS error: Unable to read inode 0x1d001e [ 1053.139820] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1053.147008] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1053.158899] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1053.180989] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1053.187738] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1053.204768] SQUASHFS error: squashfs_read_data failed to read block 0x123 [ 1053.212010] SQUASHFS error: Unable to read metadata cache entry [123] [ 1053.225043] SQUASHFS error: Unable to read inode 0x1d001e 04:54:01 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1053.276277] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 04:54:02 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6600, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1053.342900] SQUASHFS error: squashfs_read_data failed to read block 0x124 [ 1053.344502] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1053.359681] SQUASHFS error: Unable to read metadata cache entry [124] [ 1053.371245] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1053.380890] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1053.400755] SQUASHFS error: Unable to read inode 0x1e001e [ 1053.419280] ubi0: background thread "ubi_bgt0d" started, PID 15032 [ 1053.426333] ubi0: detaching mtd0 [ 1053.482529] ubi0: mtd0 is detached [ 1053.511423] SQUASHFS error: squashfs_read_data failed to read block 0x124 [ 1053.530650] SQUASHFS error: Unable to read metadata cache entry [124] [ 1053.550891] ubi0: attaching mtd0 [ 1053.551798] SQUASHFS error: Unable to read inode 0x1e001e [ 1053.556439] ubi0: scanning is finished 04:54:02 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:02 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7", 0xa9}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1053.658650] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1053.670284] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1053.680109] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1053.689402] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1053.734462] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1053.738047] SQUASHFS error: squashfs_read_data failed to read block 0x125 [ 1053.759125] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1053.765907] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1053.769628] SQUASHFS error: Unable to read metadata cache entry [125] [ 1053.773188] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1053.773200] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1053.773235] ubi0: background thread "ubi_bgt0d" started, PID 15064 [ 1053.780281] ubi0: detaching mtd0 [ 1053.803977] SQUASHFS error: Unable to read inode 0x1f001e [ 1053.811198] ubi0: mtd0 is detached 04:54:02 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e713", 0xaa}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1053.834184] ubi0: attaching mtd0 [ 1053.838551] ubi0: scanning is finished [ 1053.923069] SQUASHFS error: squashfs_read_data failed to read block 0x125 [ 1053.939865] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 04:54:02 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:02 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6700, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x7) [ 1053.990960] SQUASHFS error: Unable to read metadata cache entry [125] [ 1053.998864] ubi0: attaching mtd0 [ 1054.002701] SQUASHFS error: Unable to read inode 0x1f001e [ 1054.016963] ubi0: scanning is finished 04:54:02 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e00200000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1054.118749] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1054.143029] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1054.161431] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1054.177395] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1054.183421] SQUASHFS error: xz decompression failed, data probably corrupt [ 1054.208048] SQUASHFS error: squashfs_read_data failed to read block 0x126 [ 1054.227309] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1054.229784] SQUASHFS error: Unable to read metadata cache entry [126] [ 1054.235560] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1054.248082] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1054.258627] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1054.261626] SQUASHFS error: Unable to read inode 0x20001e [ 1054.268486] ubi0: background thread "ubi_bgt0d" started, PID 15102 [ 1054.281111] ubi: mtd0 is already attached to ubi0 [ 1054.290612] ubi0: detaching mtd0 [ 1054.341874] ubi0: mtd0 is detached [ 1054.359281] ubi0: attaching mtd0 [ 1054.367704] SQUASHFS error: xz decompression failed, data probably corrupt [ 1054.385148] ubi0: scanning is finished 04:54:03 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e713", 0xaa}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1054.385533] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 04:54:03 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1054.430520] SQUASHFS error: squashfs_read_data failed to read block 0x126 [ 1054.472497] SQUASHFS error: Unable to read metadata cache entry [126] [ 1054.491682] SQUASHFS error: Unable to read inode 0x20001e [ 1054.505905] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1054.513442] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 04:54:03 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6800, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:03 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1054.521515] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1054.528627] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1054.557878] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1054.571868] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1054.586977] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1054.596828] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1054.606549] ubi0: background thread "ubi_bgt0d" started, PID 15128 [ 1054.612586] ubi0: detaching mtd0 [ 1054.712497] SQUASHFS error: squashfs_read_data failed to read block 0x127 [ 1054.740121] SQUASHFS error: Unable to read metadata cache entry [127] [ 1054.748746] SQUASHFS error: Unable to read inode 0x21001e [ 1054.752643] ubi0: mtd0 is detached 04:54:03 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x7) [ 1054.760330] ubi0: attaching mtd0 [ 1054.774824] ubi0: scanning is finished 04:54:03 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1054.824727] SQUASHFS error: squashfs_read_data failed to read block 0x127 [ 1054.833713] SQUASHFS error: Unable to read metadata cache entry [127] [ 1054.848504] SQUASHFS error: Unable to read inode 0x21001e 04:54:03 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1054.915441] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1054.945299] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1054.975995] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1054.980578] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1054.991502] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1055.007087] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1055.013395] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1055.023018] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1055.033339] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1055.051490] ubi0: background thread "ubi_bgt0d" started, PID 15157 [ 1055.051504] ubi: mtd0 is already attached to ubi0 [ 1055.063607] ubi0: detaching mtd0 [ 1055.112944] SQUASHFS error: squashfs_read_data failed to read block 0x128 [ 1055.114899] ubi0: mtd0 is detached [ 1055.139469] ubi0: attaching mtd0 [ 1055.152510] SQUASHFS error: Unable to read metadata cache entry [128] [ 1055.153197] ubi0: scanning is finished 04:54:03 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:03 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e713", 0xaa}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1055.187764] SQUASHFS error: Unable to read inode 0x22001e 04:54:03 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6900, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1055.261850] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1055.275471] SQUASHFS error: squashfs_read_data failed to read block 0x128 [ 1055.282443] SQUASHFS error: Unable to read metadata cache entry [128] [ 1055.290026] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1055.313585] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1055.319911] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1055.327203] SQUASHFS error: Unable to read inode 0x22001e [ 1055.333771] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1055.364965] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1055.372286] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:54:04 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1055.410043] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1055.420719] ubi: mtd0 is already attached to ubi0 [ 1055.420731] ubi0: background thread "ubi_bgt0d" started, PID 15182 [ 1055.427758] ubi0: detaching mtd0 04:54:04 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {0x0}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1055.487836] ubi0: mtd0 is detached [ 1055.495750] ubi0: attaching mtd0 [ 1055.500025] ubi0: scanning is finished 04:54:04 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1055.566893] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1055.576397] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1055.588460] SQUASHFS error: xz decompression failed, data probably corrupt [ 1055.591469] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1055.620699] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1055.623996] SQUASHFS error: squashfs_read_data failed to read block 0x129 [ 1055.641964] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1055.657935] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1055.667920] SQUASHFS error: Unable to read metadata cache entry [129] [ 1055.686163] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1055.696856] SQUASHFS error: Unable to read inode 0x23001e [ 1055.709950] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1055.720671] ubi0: background thread "ubi_bgt0d" started, PID 15206 [ 1055.728271] ubi: mtd0 is already attached to ubi0 [ 1055.733604] ubi0: detaching mtd0 04:54:04 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x7) [ 1055.786378] ubi0: mtd0 is detached [ 1055.792685] ubi0: attaching mtd0 [ 1055.798837] ubi0: scanning is finished [ 1055.812002] SQUASHFS error: xz decompression failed, data probably corrupt 04:54:04 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1055.868398] SQUASHFS error: squashfs_read_data failed to read block 0x129 [ 1055.898364] SQUASHFS error: Unable to read metadata cache entry [129] [ 1055.926279] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1055.934342] SQUASHFS error: Unable to read inode 0x23001e [ 1055.946842] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1055.955307] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1055.962028] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1055.969635] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1055.977736] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1055.984491] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1055.993854] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1056.003251] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 04:54:04 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1056.028691] ubi0: background thread "ubi_bgt0d" started, PID 15235 [ 1056.028754] ubi0: detaching mtd0 [ 1056.069332] ubi0: mtd0 is detached [ 1056.085575] ubi0: attaching mtd0 04:54:04 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {0x0}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1056.122282] ubi0: scanning is finished [ 1056.138551] SQUASHFS error: xz decompression failed, data probably corrupt [ 1056.146035] SQUASHFS error: squashfs_read_data failed to read block 0x12a [ 1056.156755] SQUASHFS error: Unable to read metadata cache entry [12a] 04:54:04 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6a00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1056.168403] SQUASHFS error: Unable to read inode 0x24001e [ 1056.242225] SQUASHFS error: xz decompression failed, data probably corrupt [ 1056.258614] SQUASHFS error: squashfs_read_data failed to read block 0x12a [ 1056.275760] SQUASHFS error: Unable to read metadata cache entry [12a] 04:54:05 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1056.290667] SQUASHFS error: Unable to read inode 0x24001e [ 1056.303223] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1056.321368] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1056.330740] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1056.392422] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1056.421665] SQUASHFS error: xz decompression failed, data probably corrupt [ 1056.430039] SQUASHFS error: squashfs_read_data failed to read block 0x12b [ 1056.437438] SQUASHFS error: Unable to read metadata cache entry [12b] [ 1056.451615] SQUASHFS error: Unable to read inode 0x25001e [ 1056.461407] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1056.475240] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1056.482808] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1056.502178] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1056.512384] ubi0: background thread "ubi_bgt0d" started, PID 15265 [ 1056.512600] ubi0: detaching mtd0 [ 1056.527648] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1056.558017] SQUASHFS error: xz decompression failed, data probably corrupt [ 1056.565267] SQUASHFS error: squashfs_read_data failed to read block 0x12b [ 1056.569017] ubi0: mtd0 is detached [ 1056.576022] SQUASHFS error: Unable to read metadata cache entry [12b] [ 1056.576031] SQUASHFS error: Unable to read inode 0x25001e [ 1056.599186] ubi0: attaching mtd0 [ 1056.605123] ubi0: scanning is finished 04:54:05 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:05 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1056.643705] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1056.661054] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1056.680800] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1056.698466] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1056.721208] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 04:54:05 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6b00, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1056.758723] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1056.784683] SQUASHFS error: squashfs_read_data failed to read block 0x12c [ 1056.791675] SQUASHFS error: Unable to read metadata cache entry [12c] [ 1056.802006] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1056.809704] SQUASHFS error: Unable to read inode 0x26001e [ 1056.823836] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1056.836998] ubi0: background thread "ubi_bgt0d" started, PID 15286 [ 1056.848303] ubi: mtd0 is already attached to ubi0 [ 1056.853477] ubi0: detaching mtd0 04:54:05 executing program 5: dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = socket$alg(0x26, 0x5, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:05 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x7) [ 1056.872649] ubi0: mtd0 is detached [ 1056.883585] ubi0: attaching mtd0 [ 1056.887697] ubi0: scanning is finished [ 1056.900223] SQUASHFS error: squashfs_read_data failed to read block 0x12c [ 1056.960435] SQUASHFS error: Unable to read metadata cache entry [12c] [ 1056.989097] SQUASHFS error: Unable to read inode 0x26001e [ 1057.019640] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1057.037961] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 04:54:05 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1057.071349] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1057.094872] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1057.104440] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1057.110727] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1057.141148] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1057.142179] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1057.156114] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1057.178495] ubi0: background thread "ubi_bgt0d" started, PID 15316 [ 1057.179693] ubi0: detaching mtd0 [ 1057.190975] ubi0: mtd0 is detached [ 1057.197709] ubi0: attaching mtd0 [ 1057.202416] ubi0: scanning is finished 04:54:05 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {0x0}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1057.236636] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1057.245733] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1057.252479] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1057.267095] SQUASHFS error: squashfs_read_data failed to read block 0x12d [ 1057.281398] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1057.301365] SQUASHFS error: Unable to read metadata cache entry [12d] [ 1057.309878] SQUASHFS error: Unable to read inode 0x27001e [ 1057.329641] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 04:54:05 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6c00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1057.342419] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1057.352107] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1057.362609] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1057.372469] ubi0: background thread "ubi_bgt0d" started, PID 15333 [ 1057.380042] ubi0: detaching mtd0 [ 1057.424213] SQUASHFS error: squashfs_read_data failed to read block 0x12d [ 1057.446574] SQUASHFS error: Unable to read metadata cache entry [12d] [ 1057.462557] SQUASHFS error: Unable to read inode 0x27001e 04:54:06 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:06 executing program 5: dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = socket$alg(0x26, 0x5, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1057.547864] ubi0: mtd0 is detached [ 1057.558543] ubi0: attaching mtd0 [ 1057.574466] ubi0: scanning is finished [ 1057.590261] SQUASHFS error: squashfs_read_data failed to read block 0x12e [ 1057.628154] SQUASHFS error: Unable to read metadata cache entry [12e] [ 1057.655186] SQUASHFS error: Unable to read inode 0x28001e [ 1057.711716] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1057.722283] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1057.734990] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1057.742136] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1057.752746] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1057.759118] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 04:54:06 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) socket$alg(0x26, 0x5, 0x0) [ 1057.785795] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1057.792944] SQUASHFS error: squashfs_read_data failed to read block 0x12e [ 1057.812464] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1057.824172] SQUASHFS error: Unable to read metadata cache entry [12e] 04:54:06 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x7) [ 1057.842538] SQUASHFS error: Unable to read inode 0x28001e [ 1057.842654] ubi0: detaching mtd0 [ 1057.848558] ubi0: background thread "ubi_bgt0d" started, PID 15366 [ 1057.867088] ubi0: mtd0 is detached [ 1057.871210] ubi0: attaching mtd0 [ 1057.882641] ubi0: scanning is finished 04:54:06 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1057.932466] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1058.009796] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1058.019383] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1058.042165] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 04:54:06 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6d00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1058.071275] SQUASHFS error: squashfs_read_data failed to read block 0x12f [ 1058.082914] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1058.091362] SQUASHFS error: Unable to read metadata cache entry [12f] [ 1058.098419] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1058.109815] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1058.116094] SQUASHFS error: Unable to read inode 0x29001e [ 1058.117998] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1058.144383] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1058.154713] ubi0: background thread "ubi_bgt0d" started, PID 15388 [ 1058.161275] ubi0: detaching mtd0 04:54:06 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1058.202747] ubi0: mtd0 is detached [ 1058.206918] ubi0: attaching mtd0 [ 1058.236668] SQUASHFS error: squashfs_read_data failed to read block 0x12f [ 1058.244158] SQUASHFS error: Unable to read metadata cache entry [12f] 04:54:06 executing program 5: dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40046f41, 0x76006e) r1 = socket$alg(0x26, 0x5, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1058.250762] SQUASHFS error: Unable to read inode 0x29001e [ 1058.270109] ubi0: scanning is finished 04:54:06 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e002a0000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1058.309917] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1058.349363] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1058.381298] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1058.444976] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1058.445100] SQUASHFS error: squashfs_read_data failed to read block 0x130 [ 1058.452032] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1058.469050] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1058.478723] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1058.479162] SQUASHFS error: Unable to read metadata cache entry [130] [ 1058.496356] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1058.507791] ubi0: detaching mtd0 [ 1058.508938] ubi0: background thread "ubi_bgt0d" started, PID 15414 [ 1058.518615] SQUASHFS error: Unable to read inode 0x2a001e [ 1058.548355] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1058.569482] ubi0: mtd0 is detached [ 1058.598838] ubi0: attaching mtd0 [ 1058.604259] ubi0: scanning is finished [ 1058.631097] SQUASHFS error: squashfs_read_data failed to read block 0x130 [ 1058.662060] SQUASHFS error: Unable to read metadata cache entry [130] [ 1058.677550] SQUASHFS error: Unable to read inode 0x2a001e [ 1058.684041] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1058.692374] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 04:54:07 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) socket$alg(0x26, 0x5, 0x0) 04:54:07 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6e00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:07 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1058.710221] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1058.718290] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1058.730598] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1058.738907] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1058.749672] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1058.761553] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1058.773203] ubi0: background thread "ubi_bgt0d" started, PID 15440 [ 1058.779737] ubi0: detaching mtd0 04:54:07 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {0x0}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1058.812441] ubi0: mtd0 is detached [ 1058.821780] ubi0: attaching mtd0 [ 1058.861833] ubi0: scanning is finished [ 1058.961900] SQUASHFS error: squashfs_read_data failed to read block 0x131 [ 1058.984400] SQUASHFS error: Unable to read metadata cache entry [131] [ 1059.000075] SQUASHFS error: Unable to read inode 0x2b001e [ 1059.005895] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1059.012652] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1059.021536] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1059.029181] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1059.036972] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1059.045780] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1059.054116] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1059.064658] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1059.080810] ubi0: background thread "ubi_bgt0d" started, PID 15463 [ 1059.087739] ubi0: detaching mtd0 [ 1059.087745] SQUASHFS error: squashfs_read_data failed to read block 0x131 [ 1059.091122] SQUASHFS error: Unable to read metadata cache entry [131] [ 1059.091133] SQUASHFS error: Unable to read inode 0x2b001e [ 1059.129213] ubi0: mtd0 is detached [ 1059.139753] ubi0: attaching mtd0 04:54:07 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:07 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:07 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1059.173318] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1059.184037] ubi0: scanning is finished 04:54:07 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x6f00, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1059.305740] SQUASHFS error: squashfs_read_data failed to read block 0x132 [ 1059.314247] SQUASHFS error: Unable to read metadata cache entry [132] [ 1059.321336] SQUASHFS error: Unable to read inode 0x2c001e [ 1059.367367] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1059.375329] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1059.406137] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1059.412471] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1059.417532] SQUASHFS error: squashfs_read_data failed to read block 0x132 [ 1059.420376] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1059.432600] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1059.440325] SQUASHFS error: Unable to read metadata cache entry [132] [ 1059.447832] SQUASHFS error: Unable to read inode 0x2c001e 04:54:08 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1059.464997] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1059.503639] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1059.513511] ubi0: background thread "ubi_bgt0d" started, PID 15493 [ 1059.520287] ubi0: detaching mtd0 [ 1059.635351] ubi0: mtd0 is detached [ 1059.644029] SQUASHFS error: squashfs_read_data failed to read block 0x133 [ 1059.652440] SQUASHFS error: Unable to read metadata cache entry [133] [ 1059.662446] SQUASHFS error: Unable to read inode 0x2d001e [ 1059.678051] ubi0: attaching mtd0 [ 1059.682213] ubi0: scanning is finished [ 1059.729735] SQUASHFS error: squashfs_read_data failed to read block 0x133 [ 1059.745017] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1059.769106] SQUASHFS error: Unable to read metadata cache entry [133] 04:54:08 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) socket$alg(0x26, 0x5, 0x0) [ 1059.776886] SQUASHFS error: Unable to read inode 0x2d001e [ 1059.800034] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1059.811863] ubi0: attaching mtd0 04:54:08 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:08 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {0x0}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1059.837953] ubi0: scanning is finished 04:54:08 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:08 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7000, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1059.979925] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1059.987601] SQUASHFS error: squashfs_read_data failed to read block 0x134 [ 1060.002629] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1060.011791] SQUASHFS error: Unable to read metadata cache entry [134] [ 1060.020069] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1060.028986] SQUASHFS error: Unable to read inode 0x2e001e [ 1060.035077] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1060.047578] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1060.054428] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1060.062089] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1060.072150] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1060.083436] ubi0: background thread "ubi_bgt0d" started, PID 15540 [ 1060.097678] ubi0: detaching mtd0 [ 1060.119522] ubi0: mtd0 is detached 04:54:08 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:08 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1060.134188] ubi0: attaching mtd0 [ 1060.138286] ubi0: scanning is finished [ 1060.143582] SQUASHFS error: squashfs_read_data failed to read block 0x134 [ 1060.150879] SQUASHFS error: Unable to read metadata cache entry [134] [ 1060.159874] SQUASHFS error: Unable to read inode 0x2e001e [ 1060.290522] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1060.296935] SQUASHFS error: squashfs_read_data failed to read block 0x135 [ 1060.306101] SQUASHFS error: Unable to read metadata cache entry [135] [ 1060.311661] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1060.313461] SQUASHFS error: Unable to read inode 0x2f001e [ 1060.339595] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1060.352982] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1060.360180] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1060.377341] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1060.397061] SQUASHFS error: squashfs_read_data failed to read block 0x135 [ 1060.413560] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1060.430983] SQUASHFS error: Unable to read metadata cache entry [135] [ 1060.444555] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1060.451508] SQUASHFS error: Unable to read inode 0x2f001e [ 1060.455013] ubi0: detaching mtd0 [ 1060.461892] ubi0: background thread "ubi_bgt0d" started, PID 15565 [ 1060.512124] ubi0: mtd0 is detached [ 1060.519172] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1060.530798] ubi0: attaching mtd0 04:54:09 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {0x0}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:09 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:09 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1060.560007] ubi0: scanning is finished [ 1060.673327] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1060.699395] SQUASHFS error: squashfs_read_data failed to read block 0x136 [ 1060.716326] SQUASHFS error: Unable to read metadata cache entry [136] 04:54:09 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7100, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1060.732595] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1060.738944] SQUASHFS error: Unable to read inode 0x30001e [ 1060.772388] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1060.779917] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1060.788212] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1060.805698] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1060.814125] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1060.818371] SQUASHFS error: squashfs_read_data failed to read block 0x136 [ 1060.824817] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1060.841259] ubi0: background thread "ubi_bgt0d" started, PID 15589 [ 1060.848747] ubi0: detaching mtd0 [ 1060.859066] SQUASHFS error: Unable to read metadata cache entry [136] [ 1060.869161] SQUASHFS error: Unable to read inode 0x30001e [ 1060.876890] ubi0: mtd0 is detached 04:54:09 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1060.894524] ubi0: attaching mtd0 [ 1060.898693] ubi0: scanning is finished 04:54:09 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1061.005237] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1061.019025] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1061.056125] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1061.063540] SQUASHFS error: squashfs_read_data failed to read block 0x137 [ 1061.081751] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1061.082779] SQUASHFS error: Unable to read metadata cache entry [137] [ 1061.096431] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1061.106745] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1061.106800] SQUASHFS error: Unable to read inode 0x31001e [ 1061.119536] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1061.139430] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1061.151306] ubi0: background thread "ubi_bgt0d" started, PID 15613 [ 1061.171357] ubi0: detaching mtd0 [ 1061.186287] SQUASHFS error: squashfs_read_data failed to read block 0x137 [ 1061.196790] ubi0: mtd0 is detached [ 1061.198970] SQUASHFS error: Unable to read metadata cache entry [137] 04:54:09 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296", 0x56}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1061.205439] ubi0: attaching mtd0 [ 1061.211154] ubi0: scanning is finished [ 1061.220638] SQUASHFS error: Unable to read inode 0x31001e [ 1061.223726] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 04:54:09 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1061.320291] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1061.328949] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1061.338239] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1061.345479] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1061.352398] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1061.367453] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1061.390334] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:54:10 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7200, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1061.416877] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1061.440852] SQUASHFS error: squashfs_read_data failed to read block 0x138 [ 1061.458108] ubi0: background thread "ubi_bgt0d" started, PID 15637 [ 1061.466170] ubi0: detaching mtd0 [ 1061.484837] SQUASHFS error: Unable to read metadata cache entry [138] [ 1061.508307] ubi0: mtd0 is detached [ 1061.522959] ubi0: attaching mtd0 [ 1061.527104] ubi0: scanning is finished 04:54:10 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:10 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1061.541324] SQUASHFS error: Unable to read inode 0x32001e [ 1061.694163] SQUASHFS error: squashfs_read_data failed to read block 0x138 [ 1061.711360] SQUASHFS error: Unable to read metadata cache entry [138] [ 1061.728961] SQUASHFS error: Unable to read inode 0x32001e 04:54:10 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1061.750444] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1061.758315] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1061.801730] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1061.809364] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1061.826652] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1061.835332] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1061.872831] SQUASHFS error: squashfs_read_data failed to read block 0x139 [ 1061.881148] SQUASHFS error: Unable to read metadata cache entry [139] [ 1061.894394] SQUASHFS error: Unable to read inode 0x33001e [ 1061.901325] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1061.909631] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:54:10 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7300, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1061.931093] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1061.955380] ubi0: background thread "ubi_bgt0d" started, PID 15670 [ 1061.960446] ubi0: detaching mtd0 [ 1061.966812] ubi0: mtd0 is detached [ 1061.970620] ubi0: attaching mtd0 04:54:10 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1061.982250] ubi0: scanning is finished [ 1062.029316] SQUASHFS error: squashfs_read_data failed to read block 0x139 [ 1062.052339] SQUASHFS error: Unable to read metadata cache entry [139] [ 1062.067352] SQUASHFS error: Unable to read inode 0x33001e [ 1062.104449] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1062.111464] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1062.118477] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1062.126020] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1062.133576] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1062.139889] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 04:54:10 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1062.168541] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1062.196282] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1062.205832] ubi0: background thread "ubi_bgt0d" started, PID 15693 [ 1062.212440] ubi0: detaching mtd0 04:54:10 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1062.218345] ubi0: mtd0 is detached [ 1062.222580] ubi0: attaching mtd0 [ 1062.234625] ubi0: scanning is finished 04:54:10 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296", 0x56}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1062.296553] SQUASHFS error: squashfs_read_data failed to read block 0x13a [ 1062.331365] SQUASHFS error: Unable to read metadata cache entry [13a] [ 1062.358670] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1062.367256] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1062.367396] SQUASHFS error: Unable to read inode 0x34001e [ 1062.377857] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1062.399322] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1062.413057] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1062.419367] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1062.428056] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1062.438824] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1062.449564] ubi0: background thread "ubi_bgt0d" started, PID 15714 [ 1062.456924] ubi0: detaching mtd0 [ 1062.477554] SQUASHFS error: squashfs_read_data failed to read block 0x13a [ 1062.483807] ubi0: mtd0 is detached [ 1062.493199] ubi0: attaching mtd0 [ 1062.494069] SQUASHFS error: Unable to read metadata cache entry [13a] 04:54:11 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:11 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1062.509228] SQUASHFS error: Unable to read inode 0x34001e [ 1062.542915] ubi0: scanning is finished [ 1062.623204] SQUASHFS error: squashfs_read_data failed to read block 0x13b [ 1062.634878] SQUASHFS error: Unable to read metadata cache entry [13b] [ 1062.649760] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1062.660102] SQUASHFS error: Unable to read inode 0x35001e [ 1062.685429] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1062.727115] SQUASHFS error: squashfs_read_data failed to read block 0x13b [ 1062.735303] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1062.749148] SQUASHFS error: Unable to read metadata cache entry [13b] [ 1062.764133] SQUASHFS error: Unable to read inode 0x35001e 04:54:11 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:11 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7400, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1062.795204] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1062.808592] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1062.815525] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1062.829250] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1062.855807] SQUASHFS error: squashfs_read_data failed to read block 0x13c [ 1062.863017] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1062.873353] SQUASHFS error: Unable to read metadata cache entry [13c] [ 1062.880147] SQUASHFS error: Unable to read inode 0x36001e [ 1062.889610] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1062.899357] ubi0: detaching mtd0 [ 1062.899990] ubi0: background thread "ubi_bgt0d" started, PID 15739 04:54:11 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1062.937586] SQUASHFS error: squashfs_read_data failed to read block 0x13c [ 1062.947556] SQUASHFS error: Unable to read metadata cache entry [13c] [ 1062.954636] ubi0: mtd0 is detached [ 1062.958546] ubi0: attaching mtd0 [ 1062.971594] ubi0: scanning is finished [ 1062.980072] SQUASHFS error: Unable to read inode 0x36001e 04:54:11 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:11 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1063.089177] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1063.108402] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1063.133555] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1063.159781] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1063.178907] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1063.189312] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1063.207661] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1063.240298] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1063.256293] ubi0: background thread "ubi_bgt0d" started, PID 15765 [ 1063.263745] ubi0: detaching mtd0 [ 1063.286124] ubi0: mtd0 is detached [ 1063.289776] ubi0: attaching mtd0 [ 1063.301741] ubi0: scanning is finished 04:54:11 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e00370000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:11 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296", 0x56}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1063.306758] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1063.420918] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1063.426622] SQUASHFS error: squashfs_read_data failed to read block 0x13d [ 1063.439431] ubi0: attaching mtd0 [ 1063.442382] SQUASHFS error: Unable to read metadata cache entry [13d] [ 1063.449955] SQUASHFS error: Unable to read inode 0x37001e 04:54:12 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:12 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7500, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:12 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1063.493844] ubi0: scanning is finished [ 1063.541383] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1063.548417] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1063.558760] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1063.605895] SQUASHFS error: squashfs_read_data failed to read block 0x13d [ 1063.624062] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1063.636045] SQUASHFS error: Unable to read metadata cache entry [13d] [ 1063.662035] SQUASHFS error: Unable to read inode 0x37001e [ 1063.669614] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1063.678030] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 04:54:12 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1063.736959] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1063.752884] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1063.765343] ubi0: background thread "ubi_bgt0d" started, PID 15803 [ 1063.765371] ubi0: detaching mtd0 [ 1063.830894] ubi0: mtd0 is detached 04:54:12 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1063.863482] ubi0: attaching mtd0 [ 1063.867896] ubi0: scanning is finished 04:54:12 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1063.991976] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1064.012920] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1064.019447] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1064.026136] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1064.034887] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1064.040981] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1064.053353] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1064.092515] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1064.109785] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1064.119792] ubi0: detaching mtd0 [ 1064.120123] ubi0: background thread "ubi_bgt0d" started, PID 15842 [ 1064.160178] SQUASHFS error: squashfs_read_data failed to read block 0x13e [ 1064.161146] ubi0: mtd0 is detached [ 1064.167594] SQUASHFS error: Unable to read metadata cache entry [13e] [ 1064.179029] SQUASHFS error: Unable to read inode 0x38001e 04:54:12 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7600, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:12 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1064.202126] ubi0: attaching mtd0 [ 1064.216675] ubi0: scanning is finished 04:54:12 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725", 0x81}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1064.341970] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1064.346473] SQUASHFS error: squashfs_read_data failed to read block 0x13f [ 1064.355274] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1064.371109] SQUASHFS error: Unable to read metadata cache entry [13f] [ 1064.371255] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1064.388049] SQUASHFS error: Unable to read inode 0x39001e [ 1064.393933] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1064.418911] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1064.429430] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1064.448699] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1064.476339] SQUASHFS error: squashfs_read_data failed to read block 0x13f [ 1064.485024] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1064.491579] SQUASHFS error: Unable to read metadata cache entry [13f] [ 1064.505720] SQUASHFS error: Unable to read inode 0x39001e [ 1064.525338] ubi0: background thread "ubi_bgt0d" started, PID 15871 [ 1064.532049] ubi: mtd0 is already attached to ubi0 [ 1064.537931] ubi0: detaching mtd0 [ 1064.549535] ubi0: mtd0 is detached 04:54:13 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1064.572821] ubi0: attaching mtd0 [ 1064.577127] ubi0: scanning is finished 04:54:13 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="319951", 0x3}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:13 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1064.623029] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1064.694024] SQUASHFS error: squashfs_read_data failed to read block 0x140 [ 1064.721941] SQUASHFS error: Unable to read metadata cache entry [140] [ 1064.746290] SQUASHFS error: Unable to read inode 0x3a001e [ 1064.779654] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) 04:54:13 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7700, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1064.799472] SQUASHFS error: squashfs_read_data failed to read block 0x140 [ 1064.820560] SQUASHFS error: Unable to read metadata cache entry [140] [ 1064.835993] SQUASHFS error: Unable to read inode 0x3a001e 04:54:13 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1064.846462] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1064.854381] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1064.860767] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1064.883968] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1064.891125] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1064.901087] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1064.916725] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1064.930558] ubi0: background thread "ubi_bgt0d" started, PID 15901 [ 1064.938510] ubi: mtd0 is already attached to ubi0 [ 1064.944454] ubi0: detaching mtd0 [ 1064.988616] SQUASHFS error: squashfs_read_data failed to read block 0x141 [ 1065.018745] ubi0: mtd0 is detached [ 1065.027006] SQUASHFS error: Unable to read metadata cache entry [141] 04:54:13 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:13 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725", 0x81}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1065.038547] ubi0: attaching mtd0 [ 1065.044138] ubi0: scanning is finished [ 1065.066768] SQUASHFS error: Unable to read inode 0x3b001e [ 1065.096470] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1065.109224] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1065.120463] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1065.140243] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1065.149096] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1065.161863] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1065.171342] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1065.181945] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1065.199454] ubi0: background thread "ubi_bgt0d" started, PID 15923 [ 1065.211892] SQUASHFS error: squashfs_read_data failed to read block 0x141 [ 1065.218972] ubi: mtd0 is already attached to ubi0 [ 1065.225491] ubi0: detaching mtd0 04:54:13 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1065.270306] ubi0: mtd0 is detached [ 1065.285743] ubi0: attaching mtd0 [ 1065.285749] SQUASHFS error: Unable to read metadata cache entry [141] [ 1065.285761] SQUASHFS error: Unable to read inode 0x3b001e [ 1065.290341] ubi0: scanning is finished 04:54:13 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="319951", 0x3}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1065.355075] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1065.391651] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1065.398687] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1065.406235] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1065.413997] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1065.421032] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1065.446288] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 04:54:14 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1065.462426] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1065.478366] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1065.492362] ubi0: background thread "ubi_bgt0d" started, PID 15947 [ 1065.499189] ubi: mtd0 is already attached to ubi0 [ 1065.511355] ubi0: detaching mtd0 04:54:14 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7800, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1065.555196] ubi0: mtd0 is detached [ 1065.567062] ubi0: attaching mtd0 [ 1065.572012] SQUASHFS error: squashfs_read_data failed to read block 0x142 [ 1065.574585] ubi0: scanning is finished [ 1065.586129] SQUASHFS error: Unable to read metadata cache entry [142] 04:54:14 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:14 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725", 0x81}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1065.640821] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1065.652432] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1065.666623] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1065.675764] SQUASHFS error: Unable to read inode 0x3c001e [ 1065.690718] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1065.715735] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1065.735401] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1065.738379] SQUASHFS error: squashfs_read_data failed to read block 0x142 [ 1065.770376] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1065.781958] SQUASHFS error: Unable to read metadata cache entry [142] [ 1065.798968] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1065.803013] SQUASHFS error: Unable to read inode 0x3c001e [ 1065.837486] ubi0: background thread "ubi_bgt0d" started, PID 15968 04:54:14 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:14 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="319951", 0x3}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:14 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1065.851013] ubi: mtd0 is already attached to ubi0 [ 1065.857627] ubi0: detaching mtd0 [ 1065.864662] ubi0: mtd0 is detached [ 1065.871218] ubi0: attaching mtd0 [ 1065.877560] ubi0: scanning is finished [ 1065.937857] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1065.979980] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1066.014821] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1066.024044] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1066.044113] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1066.050418] SQUASHFS error: squashfs_read_data failed to read block 0x143 [ 1066.067170] SQUASHFS error: Unable to read metadata cache entry [143] [ 1066.069092] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1066.081711] SQUASHFS error: Unable to read inode 0x3d001e [ 1066.098770] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1066.108778] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1066.118729] ubi0: background thread "ubi_bgt0d" started, PID 15990 [ 1066.118840] ubi0: detaching mtd0 [ 1066.137180] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1066.165343] SQUASHFS error: squashfs_read_data failed to read block 0x143 04:54:14 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00", 0x96}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1066.214534] ubi0: mtd0 is detached [ 1066.218540] SQUASHFS error: Unable to read metadata cache entry [143] [ 1066.233986] ubi0: attaching mtd0 [ 1066.249949] SQUASHFS error: Unable to read inode 0x3d001e 04:54:14 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7900, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1066.299831] ubi0: scanning is finished 04:54:14 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1066.367522] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1066.380625] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1066.388340] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1066.401472] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1066.455380] SQUASHFS error: squashfs_read_data failed to read block 0x144 [ 1066.476588] SQUASHFS error: Unable to read metadata cache entry [144] [ 1066.491171] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1066.499142] SQUASHFS error: Unable to read inode 0x3e001e [ 1066.506304] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1066.521226] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1066.532632] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1066.554260] ubi0: background thread "ubi_bgt0d" started, PID 16024 [ 1066.561137] ubi: mtd0 is already attached to ubi0 [ 1066.572553] ubi: mtd0 is already attached to ubi0 [ 1066.577457] ubi0: detaching mtd0 [ 1066.584622] ubi0: mtd0 is detached [ 1066.590031] SQUASHFS error: squashfs_read_data failed to read block 0x144 [ 1066.601466] ubi0: attaching mtd0 [ 1066.610615] ubi0: scanning is finished 04:54:15 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e9", 0x5}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:15 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1066.645206] SQUASHFS error: Unable to read metadata cache entry [144] [ 1066.678506] SQUASHFS error: Unable to read inode 0x3e001e [ 1066.717157] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1066.733985] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1066.740970] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1066.747932] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1066.754421] ubi0: VID header offset: 64 (aligned 64), data offset: 128 04:54:15 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1066.817465] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1066.827314] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1066.835241] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:54:15 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7a00, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1066.861398] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1066.871283] ubi0: background thread "ubi_bgt0d" started, PID 16050 [ 1066.878052] ubi0: detaching mtd0 04:54:15 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00", 0x96}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1066.939838] SQUASHFS error: squashfs_read_data failed to read block 0x145 [ 1066.946526] ubi0: mtd0 is detached [ 1066.951885] SQUASHFS error: Unable to read metadata cache entry [145] [ 1066.957476] ubi0: attaching mtd0 [ 1066.965105] ubi0: scanning is finished [ 1066.975604] SQUASHFS error: Unable to read inode 0x3f001e [ 1067.034374] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1067.052418] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1067.063708] SQUASHFS error: squashfs_read_data failed to read block 0x145 [ 1067.071496] SQUASHFS error: Unable to read metadata cache entry [145] [ 1067.078985] SQUASHFS error: Unable to read inode 0x3f001e [ 1067.088534] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1067.101333] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1067.109110] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1067.116162] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 04:54:15 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e00400000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1067.132180] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1067.141513] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1067.158130] ubi0: background thread "ubi_bgt0d" started, PID 16074 [ 1067.158144] ubi: mtd0 is already attached to ubi0 04:54:15 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e9", 0x5}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:15 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1067.187382] ubi: mtd0 is already attached to ubi0 [ 1067.193042] ubi0: detaching mtd0 [ 1067.198491] ubi0: mtd0 is detached [ 1067.212423] ubi0: attaching mtd0 [ 1067.216635] ubi0: scanning is finished 04:54:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1067.287267] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1067.295519] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1067.305131] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1067.311755] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1067.311857] SQUASHFS error: squashfs_read_data failed to read block 0x146 [ 1067.320143] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1067.338551] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1067.347072] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1067.357633] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1067.372321] SQUASHFS error: Unable to read metadata cache entry [146] [ 1067.381959] ubi0: background thread "ubi_bgt0d" started, PID 16095 [ 1067.400937] ubi0: detaching mtd0 [ 1067.431680] SQUASHFS error: Unable to read inode 0x40001e [ 1067.443859] ubi0: mtd0 is detached [ 1067.455969] ubi0: attaching mtd0 [ 1067.460259] ubi0: scanning is finished 04:54:16 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00", 0x96}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1067.544354] SQUASHFS error: squashfs_read_data failed to read block 0x146 [ 1067.564163] SQUASHFS error: Unable to read metadata cache entry [146] [ 1067.567500] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1067.579074] SQUASHFS error: Unable to read inode 0x40001e [ 1067.587717] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1067.595055] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1067.612429] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1067.619980] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1067.631068] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1067.638095] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1067.646553] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1067.656318] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1067.666223] ubi0: background thread "ubi_bgt0d" started, PID 16116 [ 1067.672764] ubi: mtd0 is already attached to ubi0 [ 1067.677733] ubi0: detaching mtd0 [ 1067.698968] ubi0: mtd0 is detached [ 1067.714033] ubi0: attaching mtd0 [ 1067.719018] ubi0: scanning is finished 04:54:16 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:16 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:16 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e9", 0x5}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:16 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7b00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1067.888088] SQUASHFS error: squashfs_read_data failed to read block 0x147 [ 1067.904442] SQUASHFS error: Unable to read metadata cache entry [147] [ 1067.911722] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1067.929807] SQUASHFS error: Unable to read inode 0x41001e [ 1067.950366] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1067.958073] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1067.965204] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1067.972699] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1067.979549] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1067.989937] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1068.012578] SQUASHFS error: squashfs_read_data failed to read block 0x147 [ 1068.025512] SQUASHFS error: Unable to read metadata cache entry [147] [ 1068.042580] SQUASHFS error: Unable to read inode 0x41001e 04:54:16 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1068.064959] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1068.078684] ubi0: background thread "ubi_bgt0d" started, PID 16144 [ 1068.086099] ubi: mtd0 is already attached to ubi0 [ 1068.091417] ubi0: detaching mtd0 [ 1068.213172] SQUASHFS error: squashfs_read_data failed to read block 0x148 [ 1068.221166] SQUASHFS error: Unable to read metadata cache entry [148] [ 1068.226451] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1068.239964] SQUASHFS error: Unable to read inode 0x42001e [ 1068.256436] ubi0: mtd0 is detached 04:54:16 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:16 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1068.266906] ubi0: attaching mtd0 [ 1068.271021] ubi0: scanning is finished [ 1068.326013] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1068.333268] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1068.339836] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1068.347076] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1068.353965] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1068.360037] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1068.371231] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1068.387353] SQUASHFS error: squashfs_read_data failed to read block 0x148 [ 1068.394938] SQUASHFS error: Unable to read metadata cache entry [148] [ 1068.401869] SQUASHFS error: Unable to read inode 0x42001e [ 1068.410480] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1068.420766] ubi0: background thread "ubi_bgt0d" started, PID 16169 [ 1068.427724] ubi0: detaching mtd0 [ 1068.436134] ubi0: mtd0 is detached [ 1068.439777] ubi0: attaching mtd0 [ 1068.449887] ubi0: scanning is finished 04:54:17 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7c00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:17 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:17 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1068.546701] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1068.553870] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1068.560908] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1068.569547] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1068.577428] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1068.584131] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1068.591586] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1068.601756] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1068.615354] ubi0: detaching mtd0 [ 1068.650205] ubi0: mtd0 is detached [ 1068.657274] ubi0: attaching mtd0 [ 1068.661386] ubi0: scanning is finished 04:54:17 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x7) [ 1068.727444] SQUASHFS error: squashfs_read_data failed to read block 0x149 [ 1068.754236] SQUASHFS error: Unable to read metadata cache entry [149] [ 1068.768354] SQUASHFS error: Unable to read inode 0x43001e [ 1068.805451] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1068.813844] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1068.820643] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1068.827641] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1068.849212] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1068.856324] SQUASHFS error: squashfs_read_data failed to read block 0x149 [ 1068.861770] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1068.877913] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1068.884648] SQUASHFS error: Unable to read metadata cache entry [149] [ 1068.888092] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1068.904235] SQUASHFS error: Unable to read inode 0x43001e [ 1068.910375] ubi0: background thread "ubi_bgt0d" started, PID 16208 [ 1068.918392] ubi0: detaching mtd0 04:54:17 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1068.969076] ubi0: mtd0 is detached [ 1068.986115] ubi0: attaching mtd0 [ 1068.993530] ubi0: scanning is finished 04:54:17 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e00440000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1069.041330] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1069.057287] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1069.064607] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1069.082030] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1069.120875] ubi0: VID header offset: 64 (aligned 64), data offset: 128 04:54:17 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7d00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1069.163962] SQUASHFS error: squashfs_read_data failed to read block 0x14a [ 1069.186972] SQUASHFS error: Unable to read metadata cache entry [14a] [ 1069.195165] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1069.206889] SQUASHFS error: Unable to read inode 0x44001e [ 1069.233330] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1069.266009] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1069.297707] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1069.314707] SQUASHFS error: squashfs_read_data failed to read block 0x14a [ 1069.336927] SQUASHFS error: Unable to read metadata cache entry [14a] [ 1069.351408] SQUASHFS error: Unable to read inode 0x44001e [ 1069.390633] ubi0: background thread "ubi_bgt0d" started, PID 16224 [ 1069.398110] ubi0: detaching mtd0 [ 1069.409645] ubi0: mtd0 is detached 04:54:18 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1069.440595] ubi0: attaching mtd0 [ 1069.452266] ubi0: scanning is finished [ 1069.514080] SQUASHFS error: squashfs_read_data failed to read block 0x14b [ 1069.531389] SQUASHFS error: Unable to read metadata cache entry [14b] [ 1069.547323] SQUASHFS error: Unable to read inode 0x45001e [ 1069.552895] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 04:54:18 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:18 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1069.561635] ubi0: attaching mtd0 [ 1069.566578] ubi0: scanning is finished [ 1069.618643] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1069.625694] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1069.634019] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1069.640354] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1069.647941] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1069.655207] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1069.663300] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1069.673380] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1069.688867] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1069.701065] ubi0: background thread "ubi_bgt0d" started, PID 16261 [ 1069.706609] SQUASHFS error: squashfs_read_data failed to read block 0x14b [ 1069.708723] ubi0: detaching mtd0 [ 1069.720052] ubi0: mtd0 is detached 04:54:18 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x7) [ 1069.741979] ubi0: attaching mtd0 [ 1069.746343] ubi0: scanning is finished [ 1069.757557] SQUASHFS error: Unable to read metadata cache entry [14b] [ 1069.775022] SQUASHFS error: Unable to read inode 0x45001e 04:54:18 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:18 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7e00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1069.838401] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1069.857485] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1069.867543] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1069.879170] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1069.888911] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1069.895196] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1069.903041] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1069.917831] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 04:54:18 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1069.939343] ubi0: background thread "ubi_bgt0d" started, PID 16284 [ 1069.947518] ubi0: detaching mtd0 [ 1069.957968] ubi0: mtd0 is detached [ 1069.962785] ubi0: attaching mtd0 [ 1069.967004] ubi0: scanning is finished [ 1070.034281] SQUASHFS error: squashfs_read_data failed to read block 0x14c [ 1070.049988] SQUASHFS error: Unable to read metadata cache entry [14c] [ 1070.062891] SQUASHFS error: Unable to read inode 0x46001e [ 1070.093428] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1070.100416] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1070.109049] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1070.136434] SQUASHFS error: squashfs_read_data failed to read block 0x14c [ 1070.144314] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1070.151324] SQUASHFS error: Unable to read metadata cache entry [14c] [ 1070.160162] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1070.167255] SQUASHFS error: Unable to read inode 0x46001e [ 1070.173800] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1070.187147] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1070.199148] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1070.209370] ubi0: background thread "ubi_bgt0d" started, PID 16304 [ 1070.209441] ubi0: detaching mtd0 [ 1070.227992] ubi0: mtd0 is detached 04:54:18 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1070.250889] ubi0: attaching mtd0 [ 1070.258847] ubi0: scanning is finished 04:54:18 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1070.344303] SQUASHFS error: squashfs_read_data failed to read block 0x14d [ 1070.360843] SQUASHFS error: Unable to read metadata cache entry [14d] [ 1070.373229] SQUASHFS error: Unable to read inode 0x47001e [ 1070.383984] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1070.403610] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1070.410568] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1070.417563] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1070.424361] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1070.431179] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1070.437787] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1070.446045] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1070.456108] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1070.465457] ubi0: background thread "ubi_bgt0d" started, PID 16328 [ 1070.471981] ubi: mtd0 is already attached to ubi0 [ 1070.477027] ubi0: detaching mtd0 [ 1070.516324] SQUASHFS error: squashfs_read_data failed to read block 0x14d [ 1070.545417] ubi0: mtd0 is detached [ 1070.549761] ubi0: attaching mtd0 [ 1070.549836] SQUASHFS error: Unable to read metadata cache entry [14d] [ 1070.560362] SQUASHFS error: Unable to read inode 0x47001e [ 1070.566972] ubi0: scanning is finished 04:54:19 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x7) 04:54:19 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x7f00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:19 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:19 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1070.673014] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1070.686200] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1070.710736] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1070.737995] SQUASHFS error: squashfs_read_data failed to read block 0x14e [ 1070.742012] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1070.751619] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1070.754649] SQUASHFS error: Unable to read metadata cache entry [14e] [ 1070.780392] SQUASHFS error: Unable to read inode 0x48001e [ 1070.788186] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1070.812225] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1070.821548] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1070.841871] ubi0: background thread "ubi_bgt0d" started, PID 16342 [ 1070.848602] ubi0: detaching mtd0 [ 1070.873985] ubi0: mtd0 is detached [ 1070.874894] SQUASHFS error: squashfs_read_data failed to read block 0x14e 04:54:19 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1070.889661] ubi0: attaching mtd0 [ 1070.895211] ubi0: scanning is finished [ 1070.898012] SQUASHFS error: Unable to read metadata cache entry [14e] [ 1070.908443] SQUASHFS error: Unable to read inode 0x48001e 04:54:19 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94", 0xa6}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1071.019427] SQUASHFS error: squashfs_read_data failed to read block 0x14f [ 1071.032573] SQUASHFS error: Unable to read metadata cache entry [14f] [ 1071.039936] SQUASHFS error: Unable to read inode 0x49001e [ 1071.047473] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1071.067541] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1071.082315] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1071.088577] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1071.097365] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1071.120749] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1071.130703] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1071.157605] SQUASHFS error: squashfs_read_data failed to read block 0x14f [ 1071.175447] SQUASHFS error: Unable to read metadata cache entry [14f] [ 1071.184469] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1071.209687] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1071.214105] SQUASHFS error: Unable to read inode 0x49001e 04:54:19 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:19 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1071.242525] ubi0: background thread "ubi_bgt0d" started, PID 16377 [ 1071.250935] ubi0: detaching mtd0 [ 1071.258695] ubi0: mtd0 is detached [ 1071.267262] ubi0: attaching mtd0 [ 1071.271745] ubi0: scanning is finished 04:54:19 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8100, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1071.325785] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1071.338712] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1071.346505] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1071.353723] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1071.360509] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1071.367649] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1071.375896] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1071.406407] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1071.416160] ubi0: background thread "ubi_bgt0d" started, PID 16391 [ 1071.416210] ubi0: detaching mtd0 [ 1071.460510] SQUASHFS error: squashfs_read_data failed to read block 0x150 [ 1071.473206] SQUASHFS error: Unable to read metadata cache entry [150] [ 1071.474633] ubi0: mtd0 is detached [ 1071.480331] SQUASHFS error: Unable to read inode 0x4a001e [ 1071.517369] ubi0: attaching mtd0 [ 1071.531119] ubi0: scanning is finished 04:54:20 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {0x0}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1071.569960] SQUASHFS error: squashfs_read_data failed to read block 0x150 [ 1071.588822] SQUASHFS error: Unable to read metadata cache entry [150] [ 1071.617558] SQUASHFS error: Unable to read inode 0x4a001e 04:54:20 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1071.753367] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1071.765931] SQUASHFS error: squashfs_read_data failed to read block 0x151 [ 1071.785961] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1071.788777] SQUASHFS error: Unable to read metadata cache entry [151] [ 1071.807967] SQUASHFS error: Unable to read inode 0x4b001e [ 1071.852259] ubi0: attaching mtd0 [ 1071.856419] ubi0: scanning is finished 04:54:20 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8200, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000001001400d0000200040000001e01000000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1071.926466] SQUASHFS error: squashfs_read_data failed to read block 0x151 [ 1071.948850] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1071.957859] SQUASHFS error: Unable to read metadata cache entry [151] 04:54:20 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1071.982788] ubi0: attaching mtd0 [ 1071.983226] SQUASHFS error: Unable to read inode 0x4b001e [ 1071.987364] ubi0: scanning is finished 04:54:20 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94", 0xa6}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:20 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1072.080132] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1072.092597] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1072.099374] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1072.107538] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1072.127380] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1072.138033] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1072.146560] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1072.157018] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1072.170112] ubi0: background thread "ubi_bgt0d" started, PID 16445 [ 1072.170177] ubi0: detaching mtd0 [ 1072.203536] ubi0: mtd0 is detached [ 1072.220281] ubi0: attaching mtd0 [ 1072.224815] ubi0: scanning is finished 04:54:20 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1072.249747] SQUASHFS error: squashfs_read_data failed to read block 0x152 [ 1072.284712] SQUASHFS error: Unable to read metadata cache entry [152] [ 1072.293458] SQUASHFS error: Unable to read inode 0x4c001e [ 1072.351878] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1072.358824] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1072.370535] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1072.385031] SQUASHFS error: squashfs_read_data failed to read block 0x152 [ 1072.388796] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1072.400018] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1072.409301] SQUASHFS error: Unable to read metadata cache entry [152] [ 1072.413197] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1072.428776] SQUASHFS error: Unable to read inode 0x4c001e [ 1072.459701] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1072.476170] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1072.488413] ubi0: background thread "ubi_bgt0d" started, PID 16469 [ 1072.488430] ubi0: detaching mtd0 04:54:21 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:21 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {0x0}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1072.510127] ubi0: mtd0 is detached [ 1072.516364] ubi0: attaching mtd0 [ 1072.539298] ubi0: scanning is finished [ 1072.598188] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1072.649122] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1072.681766] SQUASHFS error: squashfs_read_data failed to read block 0x153 04:54:21 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8300, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1072.693479] SQUASHFS error: Unable to read metadata cache entry [153] [ 1072.700505] SQUASHFS error: Unable to read inode 0x4d001e [ 1072.708045] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1072.718204] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1072.734856] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1072.746080] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1072.752676] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1072.760112] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1072.770111] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1072.779763] ubi0: background thread "ubi_bgt0d" started, PID 16493 [ 1072.787347] ubi: mtd0 is already attached to ubi0 [ 1072.805320] ubi0: detaching mtd0 [ 1072.828000] SQUASHFS error: squashfs_read_data failed to read block 0x153 [ 1072.841132] ubi0: mtd0 is detached [ 1072.850010] SQUASHFS error: Unable to read metadata cache entry [153] [ 1072.860361] SQUASHFS error: Unable to read inode 0x4d001e [ 1072.871588] ubi0: attaching mtd0 04:54:21 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94", 0xa6}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1072.875722] ubi0: scanning is finished 04:54:21 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1072.955684] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1072.962886] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1072.973075] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1072.979588] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1072.987824] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1072.994754] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 04:54:21 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1073.007900] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1073.037461] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1073.048751] ubi0: background thread "ubi_bgt0d" started, PID 16510 [ 1073.056149] ubi0: detaching mtd0 [ 1073.079224] ubi0: mtd0 is detached [ 1073.084723] ubi0: attaching mtd0 [ 1073.089683] ubi0: scanning is finished 04:54:21 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1073.138404] SQUASHFS error: squashfs_read_data failed to read block 0x154 [ 1073.166784] SQUASHFS error: Unable to read metadata cache entry [154] [ 1073.183600] SQUASHFS error: Unable to read inode 0x4e001e [ 1073.204634] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1073.216959] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1073.226297] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1073.239305] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1073.250109] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1073.263056] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1073.273325] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1073.307789] SQUASHFS error: squashfs_read_data failed to read block 0x154 [ 1073.326037] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1073.337937] SQUASHFS error: Unable to read metadata cache entry [154] [ 1073.345597] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1073.349715] ubi0: background thread "ubi_bgt0d" started, PID 16529 [ 1073.360661] ubi0: detaching mtd0 [ 1073.366370] SQUASHFS error: Unable to read inode 0x4e001e [ 1073.406085] ubi0: mtd0 is detached [ 1073.417224] ubi0: attaching mtd0 [ 1073.423564] ubi0: scanning is finished 04:54:22 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {0x0}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:22 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:22 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8400, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1073.486615] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1073.493702] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1073.500379] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1073.508735] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1073.516289] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1073.524502] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1073.532708] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1073.543269] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1073.553192] ubi0: background thread "ubi_bgt0d" started, PID 16549 [ 1073.556391] ubi0: detaching mtd0 [ 1073.574181] ubi0: mtd0 is detached [ 1073.581026] ubi0: attaching mtd0 [ 1073.585242] ubi0: scanning is finished 04:54:22 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1073.676506] SQUASHFS error: squashfs_read_data failed to read block 0x155 [ 1073.697047] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1073.705246] SQUASHFS error: Unable to read metadata cache entry [155] [ 1073.719813] SQUASHFS error: Unable to read inode 0x4f001e [ 1073.721177] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1073.748002] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1073.764550] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1073.791096] SQUASHFS error: squashfs_read_data failed to read block 0x155 [ 1073.796633] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1073.811672] SQUASHFS error: Unable to read metadata cache entry [155] [ 1073.817119] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1073.830788] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1073.835502] SQUASHFS error: Unable to read inode 0x4f001e [ 1073.846830] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1073.867395] ubi0: background thread "ubi_bgt0d" started, PID 16571 [ 1073.867424] ubi: mtd0 is already attached to ubi0 [ 1073.889561] ubi0: detaching mtd0 04:54:22 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1073.926040] ubi0: mtd0 is detached 04:54:22 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1073.958105] ubi0: attaching mtd0 [ 1073.965325] ubi0: scanning is finished 04:54:22 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1074.035577] SQUASHFS error: squashfs_read_data failed to read block 0x156 [ 1074.066413] SQUASHFS error: Unable to read metadata cache entry [156] [ 1074.077521] SQUASHFS error: Unable to read inode 0x50001e [ 1074.087867] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1074.095159] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1074.097143] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1074.125833] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1074.141657] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1074.154924] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1074.171770] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1074.182127] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1074.194045] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1074.204331] ubi0: background thread "ubi_bgt0d" started, PID 16597 [ 1074.218165] ubi0: detaching mtd0 04:54:22 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8500, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1074.248034] SQUASHFS error: squashfs_read_data failed to read block 0x156 [ 1074.313280] ubi0: mtd0 is detached [ 1074.317436] ubi0: attaching mtd0 [ 1074.317825] SQUASHFS error: Unable to read metadata cache entry [156] [ 1074.336540] ubi0: scanning is finished 04:54:23 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1074.361191] SQUASHFS error: Unable to read inode 0x50001e 04:54:23 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1074.420504] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1074.428949] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1074.441474] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1074.448475] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1074.456316] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1074.463143] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1074.498461] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1074.520852] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1074.545568] SQUASHFS error: squashfs_read_data failed to read block 0x157 [ 1074.550263] ubi0: background thread "ubi_bgt0d" started, PID 16622 [ 1074.560466] ubi0: detaching mtd0 [ 1074.569609] SQUASHFS error: Unable to read metadata cache entry [157] [ 1074.569857] ubi0: mtd0 is detached [ 1074.589716] ubi0: attaching mtd0 [ 1074.591067] SQUASHFS error: Unable to read inode 0x51001e [ 1074.595455] ubi0: scanning is finished 04:54:23 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1074.688485] SQUASHFS error: squashfs_read_data failed to read block 0x157 [ 1074.706592] SQUASHFS error: Unable to read metadata cache entry [157] [ 1074.717780] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1074.729139] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1074.747278] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1074.748139] SQUASHFS error: Unable to read inode 0x51001e [ 1074.769135] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1074.778041] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1074.790738] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 04:54:23 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e00520000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1074.799001] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1074.808108] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1074.818045] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1074.827887] ubi0: background thread "ubi_bgt0d" started, PID 16642 [ 1074.827994] ubi0: detaching mtd0 04:54:23 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1074.872320] ubi0: mtd0 is detached [ 1074.880632] ubi0: attaching mtd0 [ 1074.948875] ubi0: scanning is finished 04:54:23 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8600, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1074.976452] SQUASHFS error: squashfs_read_data failed to read block 0x158 [ 1075.005906] SQUASHFS error: Unable to read metadata cache entry [158] [ 1075.015689] SQUASHFS error: Unable to read inode 0x52001e [ 1075.096937] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1075.127088] SQUASHFS error: squashfs_read_data failed to read block 0x158 [ 1075.140750] ubi0: attaching mtd0 [ 1075.145070] ubi0: scanning is finished [ 1075.156921] SQUASHFS error: Unable to read metadata cache entry [158] [ 1075.178627] SQUASHFS error: Unable to read inode 0x52001e 04:54:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:23 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:23 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1075.235103] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1075.267845] ubi0: attaching mtd0 [ 1075.273528] ubi0: scanning is finished [ 1075.395169] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1075.416168] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1075.429165] SQUASHFS error: squashfs_read_data failed to read block 0x159 [ 1075.444982] SQUASHFS error: Unable to read metadata cache entry [159] [ 1075.448351] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1075.457028] SQUASHFS error: Unable to read inode 0x53001e [ 1075.467139] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1075.474315] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1075.480572] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1075.488379] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1075.498176] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1075.508342] ubi0: background thread "ubi_bgt0d" started, PID 16694 [ 1075.514654] ubi0: detaching mtd0 [ 1075.535267] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 04:54:24 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1075.548587] ubi0: mtd0 is detached [ 1075.553563] ubi0: attaching mtd0 [ 1075.558189] ubi0: scanning is finished [ 1075.615610] SQUASHFS error: squashfs_read_data failed to read block 0x159 [ 1075.646483] SQUASHFS error: Unable to read metadata cache entry [159] [ 1075.656662] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1075.669101] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1075.683796] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1075.684645] SQUASHFS error: Unable to read inode 0x53001e [ 1075.696787] ubi0: VID header offset: 64 (aligned 64), data offset: 128 04:54:24 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8700, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:24 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1075.716165] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1075.723709] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1075.731808] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1075.741098] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1075.755112] ubi0: background thread "ubi_bgt0d" started, PID 16717 [ 1075.762939] ubi0: detaching mtd0 04:54:24 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1075.799294] ubi0: mtd0 is detached [ 1075.803138] ubi0: attaching mtd0 [ 1075.807445] ubi0: scanning is finished [ 1075.914282] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1075.929265] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1075.940945] SQUASHFS error: squashfs_read_data failed to read block 0x15a [ 1075.945232] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1075.955994] SQUASHFS error: Unable to read metadata cache entry [15a] [ 1075.965294] SQUASHFS error: Unable to read inode 0x54001e [ 1075.965542] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1075.983547] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1075.989896] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1076.005713] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1076.038996] SQUASHFS error: squashfs_read_data failed to read block 0x15a [ 1076.063782] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1076.065098] SQUASHFS error: Unable to read metadata cache entry [15a] [ 1076.095229] ubi0: background thread "ubi_bgt0d" started, PID 16737 [ 1076.096920] SQUASHFS error: Unable to read inode 0x54001e [ 1076.109900] ubi0: detaching mtd0 [ 1076.136669] ubi0: mtd0 is detached [ 1076.140722] ubi0: attaching mtd0 [ 1076.148797] ubi0: scanning is finished 04:54:24 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:24 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1076.261361] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1076.284369] SQUASHFS error: squashfs_read_data failed to read block 0x15b [ 1076.300497] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1076.303468] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1076.309691] SQUASHFS error: Unable to read metadata cache entry [15b] [ 1076.332130] SQUASHFS error: Unable to read inode 0x55001e [ 1076.340920] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1076.356198] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1076.365023] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1076.376826] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1076.388904] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1076.404571] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1076.412476] SQUASHFS error: squashfs_read_data failed to read block 0x15b [ 1076.416002] ubi0: detaching mtd0 [ 1076.421517] ubi0: background thread "ubi_bgt0d" started, PID 16755 [ 1076.434416] ubi0: mtd0 is detached [ 1076.438416] ubi0: attaching mtd0 [ 1076.444056] ubi0: scanning is finished [ 1076.456425] SQUASHFS error: Unable to read metadata cache entry [15b] [ 1076.476250] SQUASHFS error: Unable to read inode 0x55001e 04:54:25 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8800, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1076.513558] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 04:54:25 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) 04:54:25 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:25 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef9", 0xa4}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1076.553799] ubi0: attaching mtd0 [ 1076.557927] ubi0: scanning is finished [ 1076.588317] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1076.596005] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1076.613816] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1076.628459] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1076.637620] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1076.650536] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1076.676933] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1076.718060] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1076.748126] SQUASHFS error: squashfs_read_data failed to read block 0x15c [ 1076.760166] ubi0: detaching mtd0 04:54:25 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1076.761219] ubi0: background thread "ubi_bgt0d" started, PID 16776 [ 1076.767396] SQUASHFS error: Unable to read metadata cache entry [15c] [ 1076.785041] ubi0: mtd0 is detached [ 1076.789957] ubi0: attaching mtd0 [ 1076.795479] ubi0: scanning is finished [ 1076.810018] SQUASHFS error: Unable to read inode 0x56001e [ 1076.897106] SQUASHFS error: squashfs_read_data failed to read block 0x15c [ 1076.927872] SQUASHFS error: Unable to read metadata cache entry [15c] [ 1076.937633] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1076.944682] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1076.952448] SQUASHFS error: Unable to read inode 0x56001e [ 1076.958252] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1076.969827] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1076.977212] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1076.984463] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 04:54:25 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1076.999847] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1077.033642] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1077.061183] ubi0: background thread "ubi_bgt0d" started, PID 16806 [ 1077.070942] ubi0: detaching mtd0 [ 1077.091618] ubi0: mtd0 is detached [ 1077.096707] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 04:54:25 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2", 0x47}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1077.115740] ubi0: attaching mtd0 [ 1077.120094] ubi0: scanning is finished [ 1077.180561] SQUASHFS error: squashfs_read_data failed to read block 0x15d [ 1077.202563] SQUASHFS error: Unable to read metadata cache entry [15d] 04:54:25 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8900, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1077.228523] SQUASHFS error: Unable to read inode 0x57001e [ 1077.229752] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1077.259768] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1077.266776] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1077.277348] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1077.288589] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1077.299354] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1077.307765] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1077.325062] SQUASHFS error: squashfs_read_data failed to read block 0x15d [ 1077.345162] SQUASHFS error: Unable to read metadata cache entry [15d] [ 1077.359876] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1077.373568] SQUASHFS error: Unable to read inode 0x57001e [ 1077.392087] ubi0: background thread "ubi_bgt0d" started, PID 16825 [ 1077.399799] ubi0: detaching mtd0 04:54:26 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1077.467589] ubi0: mtd0 is detached [ 1077.472909] ubi0: attaching mtd0 [ 1077.480686] ubi0: scanning is finished 04:54:26 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef9", 0xa4}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:26 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1077.579013] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1077.600700] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1077.634944] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1077.654698] SQUASHFS error: squashfs_read_data failed to read block 0x15e [ 1077.667363] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1077.694720] SQUASHFS error: Unable to read metadata cache entry [15e] [ 1077.709944] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1077.718522] SQUASHFS error: Unable to read inode 0x58001e [ 1077.735145] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1077.737676] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1077.758863] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1077.769284] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1077.781667] ubi0: detaching mtd0 [ 1077.787181] ubi0: mtd0 is detached [ 1077.791134] ubi0: attaching mtd0 04:54:26 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1077.796429] ubi0: scanning is finished 04:54:26 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1077.850050] SQUASHFS error: squashfs_read_data failed to read block 0x15e [ 1077.858147] SQUASHFS error: Unable to read metadata cache entry [15e] [ 1077.866172] SQUASHFS error: Unable to read inode 0x58001e [ 1077.911483] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1077.934758] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 04:54:26 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8a00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1077.968797] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1077.979831] SQUASHFS error: squashfs_read_data failed to read block 0x15f [ 1077.993236] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1078.011479] SQUASHFS error: Unable to read metadata cache entry [15f] [ 1078.033375] SQUASHFS error: Unable to read inode 0x59001e [ 1078.048331] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1078.057279] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1078.075346] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1078.089786] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1078.106592] ubi0: background thread "ubi_bgt0d" started, PID 16874 [ 1078.106907] ubi0: detaching mtd0 [ 1078.130863] ubi0: mtd0 is detached [ 1078.136320] ubi0: attaching mtd0 [ 1078.141599] ubi0: scanning is finished [ 1078.150822] SQUASHFS error: squashfs_read_data failed to read block 0x15f 04:54:26 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2", 0x47}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1078.183714] SQUASHFS error: Unable to read metadata cache entry [15f] [ 1078.205297] SQUASHFS error: Unable to read inode 0x59001e 04:54:26 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1078.261685] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1078.274346] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1078.289258] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1078.303767] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1078.313076] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1078.319688] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1078.330218] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1078.346185] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1078.356024] ubi0: background thread "ubi_bgt0d" started, PID 16896 [ 1078.363371] ubi0: detaching mtd0 [ 1078.390354] ubi0: mtd0 is detached [ 1078.402382] ubi0: attaching mtd0 [ 1078.406498] ubi0: scanning is finished 04:54:27 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef9", 0xa4}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1078.470901] SQUASHFS error: squashfs_read_data failed to read block 0x160 [ 1078.508353] SQUASHFS error: Unable to read metadata cache entry [160] 04:54:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1078.524099] SQUASHFS error: Unable to read inode 0x5a001e [ 1078.550260] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1078.557358] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1078.564853] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1078.572100] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1078.578789] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1078.597782] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1078.615446] SQUASHFS error: squashfs_read_data failed to read block 0x160 [ 1078.643022] SQUASHFS error: Unable to read metadata cache entry [160] [ 1078.650298] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1078.677806] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1078.688041] SQUASHFS error: Unable to read inode 0x5a001e [ 1078.690282] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1078.726580] ubi0: background thread "ubi_bgt0d" started, PID 16918 [ 1078.733516] ubi0: detaching mtd0 [ 1078.739421] ubi0: mtd0 is detached 04:54:27 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8b00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:27 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:27 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1078.751386] ubi0: attaching mtd0 [ 1078.756631] ubi0: scanning is finished [ 1078.875090] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1078.889213] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1078.909781] SQUASHFS error: squashfs_read_data failed to read block 0x161 [ 1078.920373] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1078.934810] SQUASHFS error: Unable to read metadata cache entry [161] [ 1078.946444] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1078.956989] SQUASHFS error: Unable to read inode 0x5b001e [ 1078.969517] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1078.989336] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1079.000319] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1079.016558] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1079.034224] ubi0: background thread "ubi_bgt0d" started, PID 16943 [ 1079.041218] ubi0: detaching mtd0 [ 1079.050408] SQUASHFS error: squashfs_read_data failed to read block 0x161 [ 1079.078144] SQUASHFS error: Unable to read metadata cache entry [161] [ 1079.082907] ubi0: mtd0 is detached [ 1079.092676] ubi0: attaching mtd0 [ 1079.109413] ubi0: scanning is finished 04:54:27 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2", 0x47}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1079.144276] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1079.153549] SQUASHFS error: Unable to read inode 0x5b001e 04:54:27 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1079.208891] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1079.241045] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1079.262492] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1079.269469] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1079.276543] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1079.284595] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1079.293634] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 04:54:27 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8c00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1079.320174] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1079.337916] ubi0: background thread "ubi_bgt0d" started, PID 16962 [ 1079.345271] ubi0: detaching mtd0 [ 1079.365599] ubi0: mtd0 is detached [ 1079.370617] ubi0: attaching mtd0 [ 1079.382398] ubi0: scanning is finished 04:54:28 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d", 0xa5}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1079.423116] SQUASHFS error: squashfs_read_data failed to read block 0x162 [ 1079.434453] SQUASHFS error: Unable to read metadata cache entry [162] 04:54:28 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1079.467468] SQUASHFS error: Unable to read inode 0x5c001e [ 1079.509571] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1079.526865] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1079.548064] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1079.570154] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1079.594281] SQUASHFS error: squashfs_read_data failed to read block 0x162 [ 1079.595925] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1079.620961] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1079.627117] SQUASHFS error: Unable to read metadata cache entry [162] [ 1079.638579] SQUASHFS error: Unable to read inode 0x5c001e [ 1079.644227] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1079.644239] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 04:54:28 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) [ 1079.645812] ubi0: detaching mtd0 [ 1079.654052] ubi0: background thread "ubi_bgt0d" started, PID 16982 [ 1079.695871] ubi0: mtd0 is detached [ 1079.703746] ubi0: attaching mtd0 [ 1079.708512] ubi0: scanning is finished 04:54:28 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e005d0000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1079.828191] SQUASHFS error: squashfs_read_data failed to read block 0x163 [ 1079.847627] SQUASHFS error: Unable to read metadata cache entry [163] [ 1079.849041] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1079.863781] SQUASHFS error: Unable to read inode 0x5d001e [ 1079.889795] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1079.916965] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1079.931092] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1079.938425] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1079.949328] SQUASHFS error: squashfs_read_data failed to read block 0x163 [ 1079.950336] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1079.968312] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1079.970597] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1079.992756] SQUASHFS error: Unable to read metadata cache entry [163] [ 1079.999714] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1080.028028] SQUASHFS error: Unable to read inode 0x5d001e [ 1080.040180] ubi0: background thread "ubi_bgt0d" started, PID 17010 [ 1080.040280] ubi0: detaching mtd0 [ 1080.062454] ubi0: mtd0 is detached [ 1080.066266] ubi0: attaching mtd0 04:54:28 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) 04:54:28 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8d00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1080.096827] ubi0: scanning is finished 04:54:28 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726", 0x6b}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d94f351e7136d", 0xab}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1080.190096] SQUASHFS error: squashfs_read_data failed to read block 0x164 [ 1080.212927] SQUASHFS error: Unable to read metadata cache entry [164] [ 1080.226781] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1080.237173] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1080.240392] SQUASHFS error: Unable to read inode 0x5e001e [ 1080.244024] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1080.268128] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1080.276960] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1080.288893] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1080.309398] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 3445659314 [ 1080.317406] SQUASHFS error: squashfs_read_data failed to read block 0x164 [ 1080.347811] SQUASHFS error: Unable to read metadata cache entry [164] [ 1080.349120] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1080.370396] SQUASHFS error: Unable to read inode 0x5e001e [ 1080.390270] ubi0: background thread "ubi_bgt0d" started, PID 17034 [ 1080.397782] ubi0: detaching mtd0 [ 1080.406238] ubi0: mtd0 is detached [ 1080.410652] ubi0: attaching mtd0 [ 1080.424782] ubi0: scanning is finished 04:54:29 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) r2 = socket$alg(0x26, 0x5, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53aecef90d", 0xa5}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {0x0}], 0x8) 04:54:29 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1080.530104] SQUASHFS error: squashfs_read_data failed to read block 0x165 [ 1080.538125] SQUASHFS error: Unable to read metadata cache entry [165] [ 1080.546696] SQUASHFS error: Unable to read inode 0x5f001e [ 1080.612861] SQUASHFS error: squashfs_read_data failed to read block 0x165 [ 1080.620502] SQUASHFS error: Unable to read metadata cache entry [165] [ 1080.630949] SQUASHFS error: Unable to read inode 0x5f001e 04:54:29 executing program 2: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="6873717347000000911d675f000010000000000004001400d0000200040000001e00600000000000f5020000000000009902000000000000dd020000000000000601000000000000d4010000000000004d020000000000008702000000000000fd377a585a0000016922de3602c01764210110000c14f5cae00063000f5d00399e4bacd2526994d512eda5bf000000004a5579b2000127640fa29cb09042990d010000000001595afd377a585a0000016922de3603c01c9a08210110000000f793fc58dee0041900145d00399e4bacd2526994d51508fe16ca84a7aa3689df00988896660001309a080000002ec42d993e300d8b020000000001595a73797a6b616c6c657273cc00fd377a585a0000016922de3603c09401be022101020000002be6a37de0013d008c5d0001001eb04f262e3c2f422bdb8c111c2eea0ff1b7f87c3c98930ae9bef2e6cfbe86642d312630d1c1177c3f02eccf24fa6458574ea954843dbd6bc98680050321638c7a93375db1e71bae623d26e9096427e197374c50e829fa416bd93eb4fcf067eb650be21878e9ae58de233e584bfa0f44d85900daa964d53b67d7a1215e51928921aee72793826611b43c00e599fd790001a801be020000298353f53e300d8b020000000001595a7780010000000000000003000000240000000200040066696c6530480001000300040066696c6531040000000000000001000000000000000200080066696c652e636f6c64860001000100040066696c6530a60004000200040066696c6531e20005000200040066696c6532e20005000200040066696c653338800000000000000000860000000000000024000000000000004800000000000000a600000000000000e2000000000000001e010000000000004d0200000000000008805cf90100535f01008f02000000000000288000000600786174747231060000007861037472310000060078617474723206000000786174747232108000000000000000000200000024000000a10200000000000001", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1080.690361] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1080.714344] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1080.714464] ubi0: attaching mtd0 04:54:29 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x76006e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xe33b, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) faccessat(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000000c0)="3fc458bbd87d02fbe1afbf7d4a3ddd24324a58b5bd12820e5a3a6c9cd42efbaf4c18147cde766d0dbc2a24902546a2ac5b1b8a77d772eeef78d4e131d80974947f92ac034f2c965feab0cffd970a6e8d7e7ee898e9da58063d8bf21c196f99043b7bf25b250b8fcd18a6b3423cb9494d3f7c2f895d0e5c9db5e8684d4543ca6c768e1835bb57fc1694a87e46757b390a27c11a08d81bf06b5271fc3b3b3e", 0x9e}, {&(0x7f0000000180)="1733d93dc45efa8f7510674ddbfc25dceea2b7317d11b922c1488b90860f7ea7848f097eb0f2abdca9595ed556d5be7745f85136fe57cfebe871ce75afc85653375262ec63c9d9bc4ffac6143528f1360446d2eec7ce417e34225f810ec25fe84077d65dc8c1bf3efac957651975797d2455bdcdd0834f1827acd33a76a2d9103994ec2bdcd1f28e2d51c7eb3879acf25e10d5f7a83a3693626cb32ff9bf682ef95699eb717814992757487a2aac2b9245e85c1df4ad1ef4016471768a9bafb4df353f6405124717bb5971a3eb295ddabf6723fc733d0b7dca0e5873e3667c37", 0xe0}, {&(0x7f0000000000)="8b", 0x1}, {&(0x7f0000000540)="6eff1f11c712054adc4c5e2d47100cf2f1b3696e8e52cf9568975d56604e20b336feb445aa856bd749a31029e499e62793876760e9e836cfe8a4182f17691bbdb150293b70eee2fc19c0c896afca0b1f458b8459a0fe5a078113cda2ac501cbeaf879415c75dd8e410d726c7f4eea703ed2d0f378172d82cb96011dd0629dfdce701c35f9985e100000000000000", 0x8e}, {&(0x7f0000000280)="31995154e945", 0x6}, {&(0x7f00000002c0)="d4f13cd5839286aefaf7d3aabf487ce9733ff5b84fe2c99acab41a824a8889b2098927dc315962d52cd8224dee0642a6fc5ae045ede7b106aff8fc69c498b461703a788ab64ae6bd1e2e75ec2daf03cb40e3c188c296a4558031d53eb81f66fe0684adbd753a642b14ccb4f366fb025880a128728e231538e761a8c5a14250d725f98308a08d6d715f12eb80515759607dc9ebf0eb00c1d91ff08fceb37faeaf53", 0xa1}, {&(0x7f0000000380)="2da09f9b7575ee3c46996981f936a15b339e1590c297c22ba0747a5e4f0d5030f71a3ca784dc8950ae59dd70f6a2c1b00074fde04d1348e70a8d8e04f1d19ca28446e2a74ca4d7f40b32235850f77bcbba73d0b5a06518", 0x57}, {&(0x7f0000000400)="8e37063c517c00"/16, 0x10}], 0x8) [ 1080.738038] ubi0: scanning is finished [ 1080.789831] ================================================================== [ 1080.798005] BUG: KASAN: slab-out-of-bounds in squashfs_get_id+0x1ae/0x1d0 [ 1080.804959] Read of size 8 at addr ffff8880a8d71460 by task syz-executor.2/17071 [ 1080.812509] [ 1080.814305] CPU: 1 PID: 17071 Comm: syz-executor.2 Not tainted 4.19.172-syzkaller #0 [ 1080.822196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1080.831567] Call Trace: [ 1080.834182] dump_stack+0x1fc/0x2ef [ 1080.837841] print_address_description.cold+0x54/0x219 [ 1080.843324] kasan_report_error.cold+0x8a/0x1b9 [ 1080.848369] ? squashfs_get_id+0x1ae/0x1d0 [ 1080.852626] __asan_report_load8_noabort+0x88/0x90 [ 1080.857580] ? squashfs_get_id+0x1ae/0x1d0 [ 1080.861832] squashfs_get_id+0x1ae/0x1d0 [ 1080.866078] ? squashfs_read_fragment_index_table+0xf0/0xf0 [ 1080.871810] ? squashfs_read_metadata+0x2f9/0x460 [ 1080.876836] squashfs_read_inode+0x1b4/0x1b40 [ 1080.881609] ? squashfs_read_id_index_table+0x120/0x120 [ 1080.888108] ? map_id_range_down+0x1c4/0x340 [ 1080.892565] ? new_inode+0xc7/0xf0 [ 1080.896140] ? do_raw_spin_lock+0xcb/0x220 [ 1080.900578] ? do_raw_spin_unlock+0x171/0x230 [ 1080.905078] squashfs_fill_super+0x1655/0x1c00 [ 1080.909666] mount_bdev+0x2fc/0x3b0 [ 1080.913293] ? squashfs_alloc_inode+0x40/0x40 [ 1080.917938] mount_fs+0xa3/0x310 [ 1080.921425] vfs_kern_mount.part.0+0x68/0x470 [ 1080.925925] do_mount+0x113c/0x2f10 [ 1080.929564] ? cmp_ex_sort+0xc0/0xc0 [ 1080.933365] ? __do_page_fault+0x180/0xd60 [ 1080.937771] ? copy_mount_string+0x40/0x40 [ 1080.942465] ? memset+0x20/0x40 [ 1080.945747] ? copy_mount_options+0x26f/0x380 [ 1080.950507] ksys_mount+0xcf/0x130 [ 1080.954225] __x64_sys_mount+0xba/0x150 [ 1080.958214] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1080.962806] do_syscall_64+0xf9/0x620 [ 1080.966705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1080.972059] RIP: 0033:0x46702a [ 1080.975252] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1080.995133] RSP: 002b:00007f29ea554fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1081.002886] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000046702a [ 1081.010288] RDX: 0000000020000000 RSI: 0000000020002040 RDI: 00007f29ea555000 [ 1081.017624] RBP: 00007f29ea555040 R08: 00007f29ea555040 R09: 0000000020000000 [ 1081.024893] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1081.032269] R13: 0000000020002040 R14: 00007f29ea555000 R15: 0000000020002040 [ 1081.039544] [ 1081.041177] Allocated by task 16489: [ 1081.044898] __kmalloc_track_caller+0x155/0x3c0 [ 1081.049658] kstrdup+0x36/0x70 [ 1081.052850] kstrdup_const+0x53/0x80 [ 1081.056562] __kernfs_new_node+0x9b/0x680 [ 1081.060711] kernfs_new_node+0x92/0x120 [ 1081.064683] kernfs_create_link+0xd1/0x230 [ 1081.068917] sysfs_do_create_link_sd+0x90/0x130 [ 1081.073581] sysfs_create_link+0x5f/0xc0 [ 1081.077726] device_add+0x7d1/0x16d0 [ 1081.081440] netdev_register_kobject+0x181/0x430 [ 1081.086190] register_netdevice+0xb46/0x10f0 [ 1081.090589] register_vlan_dev+0x2f1/0x7d0 [ 1081.094818] vlan_ioctl_handler+0xaf9/0xf00 [ 1081.099140] sock_ioctl+0x39e/0x5d0 [ 1081.102763] do_vfs_ioctl+0xcdb/0x12e0 [ 1081.106644] ksys_ioctl+0x9b/0xc0 [ 1081.110182] __x64_sys_ioctl+0x6f/0xb0 [ 1081.114068] do_syscall_64+0xf9/0x620 [ 1081.117893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1081.123519] [ 1081.125143] Freed by task 31730: [ 1081.128513] kfree+0xcc/0x210 [ 1081.132115] kvfree+0x59/0x60 [ 1081.135879] __vunmap+0x2a5/0x3f0 [ 1081.140202] vfree+0x65/0x100 [ 1081.143365] do_arpt_get_ctl+0x652/0x7c0 [ 1081.147429] nf_getsockopt+0x72/0xd0 [ 1081.151140] ip_getsockopt+0x167/0x1c0 [ 1081.155023] tcp_getsockopt+0x86/0xd0 [ 1081.158825] __sys_getsockopt+0x135/0x210 [ 1081.163004] __x64_sys_getsockopt+0xba/0x150 [ 1081.167548] do_syscall_64+0xf9/0x620 [ 1081.171345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1081.176526] [ 1081.178160] The buggy address belongs to the object at ffff8880a8d71440 [ 1081.178160] which belongs to the cache kmalloc-32 of size 32 [ 1081.191167] The buggy address is located 0 bytes to the right of [ 1081.191167] 32-byte region [ffff8880a8d71440, ffff8880a8d71460) [ 1081.203417] The buggy address belongs to the page: [ 1081.208432] page:ffffea0002a35c40 count:1 mapcount:0 mapping:ffff88813bff01c0 index:0xffff8880a8d71fc1 [ 1081.218172] flags: 0xfff00000000100(slab) [ 1081.222398] raw: 00fff00000000100 ffffea000298eb08 ffffea0002ca33c8 ffff88813bff01c0 [ 1081.230365] raw: ffff8880a8d71fc1 ffff8880a8d71000 0000000100000032 0000000000000000 [ 1081.238370] page dumped because: kasan: bad access detected [ 1081.244140] [ 1081.245770] Memory state around the buggy address: [ 1081.250696] ffff8880a8d71300: 00 00 00 fc fc fc fc fc 00 00 fc fc fc fc fc fc [ 1081.258405] ffff8880a8d71380: 00 00 fc fc fc fc fc fc 00 00 fc fc fc fc fc fc [ 1081.266057] >ffff8880a8d71400: 00 fc fc fc fc fc fc fc 00 02 fc fc fc fc fc fc [ 1081.274362] ^ [ 1081.281462] ffff8880a8d71480: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc 04:54:29 executing program 3: syz_mount_image$squashfs(&(0x7f0000000000)='squashfs\x00', &(0x7f0000002040)='./file0\x00', 0x1000, 0x8e00, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2e6}], 0x0, &(0x7f0000002040)=ANY=[]) [ 1081.289122] ffff8880a8d71500: 00 00 fc fc fc fc fc fc fb fb fb fb fc fc fc fc [ 1081.296478] ================================================================== [ 1081.303833] Disabling lock debugging due to kernel taint [ 1081.413830] Kernel panic - not syncing: panic_on_warn set ... [ 1081.413830] [ 1081.421446] CPU: 1 PID: 17071 Comm: syz-executor.2 Tainted: G B 4.19.172-syzkaller #0 [ 1081.430727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1081.440206] Call Trace: [ 1081.442820] dump_stack+0x1fc/0x2ef [ 1081.446649] panic+0x26a/0x50e [ 1081.449872] ? __warn_printk+0xf3/0xf3 [ 1081.453784] ? preempt_schedule_common+0x45/0xc0 [ 1081.458563] ? ___preempt_schedule+0x16/0x18 [ 1081.461886] squashfs: SQUASHFS error: Can't find a SQUASHFS superblock on loop3 [ 1081.462992] ? trace_hardirqs_on+0x55/0x210 [ 1081.463010] kasan_end_report+0x43/0x49 [ 1081.463027] kasan_report_error.cold+0xa7/0x1b9 [ 1081.471506] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1081.475267] ? squashfs_get_id+0x1ae/0x1d0 [ 1081.475291] __asan_report_load8_noabort+0x88/0x90 [ 1081.475308] ? squashfs_get_id+0x1ae/0x1d0 [ 1081.500692] ubi0: attaching mtd0 [ 1081.500742] squashfs_get_id+0x1ae/0x1d0 [ 1081.505523] ubi0: scanning is finished [ 1081.508346] ? squashfs_read_fragment_index_table+0xf0/0xf0 [ 1081.525859] ? squashfs_read_metadata+0x2f9/0x460 [ 1081.530882] squashfs_read_inode+0x1b4/0x1b40 [ 1081.535504] ? squashfs_read_id_index_table+0x120/0x120 [ 1081.540874] ? map_id_range_down+0x1c4/0x340 [ 1081.545290] ? new_inode+0xc7/0xf0 [ 1081.548830] ? do_raw_spin_lock+0xcb/0x220 [ 1081.553341] ? do_raw_spin_unlock+0x171/0x230 [ 1081.557872] squashfs_fill_super+0x1655/0x1c00 [ 1081.562455] mount_bdev+0x2fc/0x3b0 [ 1081.566198] ? squashfs_alloc_inode+0x40/0x40 [ 1081.570776] mount_fs+0xa3/0x310 [ 1081.574141] vfs_kern_mount.part.0+0x68/0x470 [ 1081.578851] do_mount+0x113c/0x2f10 [ 1081.582600] ? cmp_ex_sort+0xc0/0xc0 [ 1081.586311] ? __do_page_fault+0x180/0xd60 [ 1081.590543] ? copy_mount_string+0x40/0x40 [ 1081.594777] ? memset+0x20/0x40 [ 1081.598161] ? copy_mount_options+0x26f/0x380 [ 1081.602652] ksys_mount+0xcf/0x130 [ 1081.606189] __x64_sys_mount+0xba/0x150 [ 1081.610290] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1081.614869] do_syscall_64+0xf9/0x620 [ 1081.618692] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1081.624221] RIP: 0033:0x46702a [ 1081.627510] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1081.647237] RSP: 002b:00007f29ea554fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1081.655121] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000046702a [ 1081.662389] RDX: 0000000020000000 RSI: 0000000020002040 RDI: 00007f29ea555000 [ 1081.669653] RBP: 00007f29ea555040 R08: 00007f29ea555040 R09: 0000000020000000 [ 1081.677044] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000000 [ 1081.684310] R13: 0000000020002040 R14: 00007f29ea555000 R15: 0000000020002040 [ 1081.692524] Kernel Offset: disabled [ 1081.696212] Rebooting in 86400 seconds..