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", 0x1000, 0x3d}, {&(0x7f0000000240)="a7b377fccb7d5a9defc17683600ff47629f17bcf7e2fe23a03a7158cdd9c6e1799102caa5ef10656e6e88b86e54810fe3b24bf7f0f94756179326088a9915bcfdbf11556d3a49c5b432d8154093009a33162d01f28bb7a01947bfb2fbd7a", 0x5e, 0x200000000000000}, {&(0x7f0000000300)="5ec9f1", 0x3, 0x9}, {&(0x7f00000006c0)="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", 0xff, 0x100000001}, {&(0x7f0000000340), 0x0, 0x3}, {&(0x7f0000000500)="d714e2368dfb5bcaf01182afb2d3f46bcdca3c975cd559cd29bd85c8947ecce400ad376d6d83005e0d02d0dd7cac9d79ab6c8481258711029b7352a5444682293414fae3db19ed37b11a43", 0x4b, 0x1000}]) [ 542.812992][T21369] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 542.873416][T21369] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 542.926338][T21382] ubi0: background thread "ubi_bgt0d" started, PID 21382 [ 542.933891][T21377] ubi0: detaching mtd0 [ 542.969857][T21377] ubi0: mtd0 is detached 07:28:14 executing program 2: clone(0x20016285ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) exit_group(0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000020850000002c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) [ 542.992871][T21369] ubi0: attaching mtd0 [ 542.998460][T21369] ubi0: scanning is finished 07:28:14 executing program 4: socket(0xa, 0x5, 0xb4f4) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) write$binfmt_script(r0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x2) 07:28:14 executing program 3: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x81) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x4) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) move_pages(0x0, 0x2c9, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) r2 = socket$kcm(0x29, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a00002d, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000180)=ANY=[@ANYBLOB="66643db0f3185658ef5ea971159c910c1bea83106dfd1b00b735dbac9cc03fd8fb9b271a124fcfe73688b488bfde3b1fc3dacdf70141a006ad748e7ae429fc62d43bc7dc3c84ac0419630b253ede9a6072ca16e09c1aba491f0ea176204c8a6e4647dd9ede069a24d968e1ae3103cde8f0ac5bee595fb8c81f48b3de5ddb5c81b0914d4c2f5d5a5dd3a74e8960aff9ef22714b0ed7a87a707b1c1bd1fad090ceba5bee8b5d83381dc7", @ANYRES64=0x0, @ANYBLOB="2c726f6f346d6f64e7448ac118a4d204927ddc25653d3030303030303030303030303ba73030cddf34303000982c757365725f690000", @ANYRES64=0x0, @ANYBLOB="2c67720677579e705f6964604668f0148584bef3b9ae10ea03e8336ed40100008000000000c5a4053fb23bd1b9b0160f3bc36fa2540b73ece10c549de782d961dd05ccd0654684c30f2f28127b50527b2132e3f01b456626437e87dc786b3e34da7506e2509eba641630ef83eb0000b9c1e135bc430a1fcad3b1df7ceeba155c995162edfaad0917ed10cc3bb8706f4de4118dc1ee98c0016406d9ef5ee94caa5283cb571691b58ccf9c911c0bd02c292ce5ab35988593c7eace823ed22a65adfd941b3fbdd8b9a2369314a42af9c82f9152eea2a8407fcf65a009aa0ec70e06362b1ebfb552", @ANYRESDEC=0xee01, @ANYRESOCT]) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b1a, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB="3c0a04050880120000000000000000000000000000009301fc0000000000000000000000000000002400000000000000000000000600000008fc0100000091adab137f112e00000000"], 0x58) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x1, 0x1, 0x2, 0x0, 0x80000000, 0x80, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x2}, 0x1010, 0x5c863b62, 0x40, 0x3, 0x2, 0x8, 0xc, 0x0, 0xffff619f, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x10, r2, 0x0) [ 543.133189][T21369] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 543.317657][T21402] loop1: detected capacity change from 0 to 104 [ 543.480378][T21402] loop1: p2 < > p3 p4 [ 543.485549][T21402] loop1: partition table partially beyond EOD, truncated [ 543.638692][T21402] loop1: p3 start 225 is beyond EOD, truncated [ 543.664983][T21402] loop1: p4 size 3657465856 extends beyond EOD, truncated [ 544.272619][T21348] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 544.306045][T21348] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. 07:28:16 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000a80)=ANY=[], 0xfffffecc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xe) r4 = accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0xfffffffffffffffe) 07:28:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000600) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:16 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x402882, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f00000001000010e813b71090000000000000000", @ANYRES32=0x0, @ANYBLOB="b84202000a2a0400c000128009000100766c616e00000000b000028006000100010000000600010002000000100004800c00010000800000080000000c0002000200000010000000100003800c0001000400000003000000280003800c000100070000002d0000000c00010001000000000800000c0001008e000000800000000600050088a80000400003800c0001005908ffff070000000c00010020000000cd0000000c00010000020000070000000c000100010000877baf26450d8bc000000100000080000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$afs(&(0x7f0000000240), &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5, 0x3, &(0x7f00000006c0)=[{&(0x7f00000013c0)="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", 0x1000, 0x7ff}, {&(0x7f0000000540)="5a252d9a9acd598431d9957d494587714a485639fb17baacc24c02485a2a14279e0927bd946697b6d7a34ebbf957bedef5b511239bd2bd9b314c372e0c6bbbeab5e5104a3ec93261b5f43f2ddb194baf105407e65319bc00f866d07a919ba94e1786ac9817046f40519b737a58e92ec0cf6dc9f985e6f484ba6740eebac0c1d72954795acd42", 0x86, 0x9}, {&(0x7f0000000600)="d6c17f76506d4152b2b0b6e44804255e6c54bb80525f89b362a7eec84d014599645ab2a9b1cbc9d3f582caeeabdc2dcbf65966dc7084c705e72fbcca5cc6da697a55f9916eb7f230f6026be018784a7222913d6be6210dc58f7a9a50e32bf78a60d6eb1793ee7c5f84b2b880830c8012b04f4e606ae219b7a9fc0151d9bfbdc590294e66acc1e8e70ade0179badddb90801f58c39a8653836d071955b25b8f14e56ac9ae1ee7033708e9a8362c176815fd060ee5c340cf10be", 0xb9, 0x8}], 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="666c6f636b3d7374726963742c736d618067a51bb9ae9d64d9422123eec88d51636b66737472616e736d7574653d2f6465762f76637373bbe0266f6e745f61707072616973652c736d61636b6673666c6f6f723d2f6465762f76637361002c6d61736b3d4d41595f455845432c736d61636b66736861743d2bf72c61707072616973652c66736e616d653d626f6e642a72b75490db5ede747970653d002c657569643e", @ANYRESDEC, @ANYBLOB=',\x00']) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r6, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x2, 0x7, 0x8, 0x6, 0x0, 0x8, 0x80c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xffffffff, 0x800}, 0x4, 0x9, 0xa6, 0x0, 0x50a1, 0x6, 0xfffa, 0x0, 0x5}, 0x0, 0xd, r6, 0x8) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f0000000200)=0x6) 07:28:16 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) write$binfmt_script(r0, 0x0, 0x0) 07:28:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x44, 0x30, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001e40)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000009008fb140959d000000622f66"]) sendmsg$kcm(r2, &(0x7f0000002700)={&(0x7f0000001e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x2, 0x4, {0xa, 0x4e20, 0x4, @local, 0xffff}}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001f00)="754577b47720081929c649776e70fea39e7bb3e5f6b1d3800d6306ef5215f1118df75b45825fa5efc556df00afc9a5a1e19c7c68490e4c8aedea745164ccffc0e30d3e8cc76147d8bd546fc69774d13287c432e55c44456663775ee9f578418b29c1e135ad7775e51af124a30d678ecdcdc86b0ccb69788189242525562ff099b14a64345f5d80b6fd2a8c827a6ed3a90802be4ecd442bad56ab43d73407e08d4b61ff6124867074f0d697f31e79c4f7676a57eb4517a1ca0fb8675af5f90590c8c336e95268f9399b1f", 0xca}, {&(0x7f0000002000)="e949a457ba86c2d29291fa220ec0e6bb24a331cba7cc136b40098f9139fc4393533a70a196d288b6d8ac68a5cc4c2ff007b85131ab4d0a7330efc5aa2b13555ace6250eb0cf79a8d43dd052158256197e5f93c4b6cceb34823fac78a7e0b3acc810973224735165124eb42d51c6315de187bf8e57907389ed89e376a3fbc0494e95fe2f3ba50fb02ad350ba89265c116b3060d368f8bac0da32d9f043111b8bd2faf79a70cda437656a29d60f36ed126", 0xb0}, {&(0x7f00000020c0)="85eb60a697bb3a0e4de9796559eac1497a57551a18f81f9b483ccce016d9d08d37bf60f2d2ba0e14df8f985fa0fe67b020695a43e7ff14c89270932cf4c9420cc3f26a5d155b36ed9eb2a21966291740ea6669a21ab567cb19f5d1ec08bd7730d2cdb60023626b544e5f2a1d67fa86c93d81e2b3718a7d3b5a5eede1966ab94aff0a870a5a529bdf2204c06a2533f8b8f6e3ce985c152e035ce4b7b35443b5b2a32c4352d2ef2b87250262b3e04a9fad2cfff16924e337642993f588473f61d1c4ec652d76d6827575d1c6f0ac4fc070abb8afb5fc060d6f29ace00d", 0xdc}, {&(0x7f00000021c0)="d4276b6fc71b0ac65fd2f209d4321456a589ea75825de0243a020b2163cdae413d7102515da31c4667f43ff41e9acbfdac790153aab5e34628f9c13ade3259aaa556b8e41d7c5fd1ddefb7026354e80c585169a4bc361720728b3d798ed7e18a9172019e08bb5de52ebab713a19482960fd42fff35c78ddcbf11c4d8f94956c2c88a4e9bc9ff9b6b65f5a6774c5adc668033901c84444e0fc1ff91375e254787d12b3de20739e1fe6e12f2510b5b5a6120b457", 0xb3}], 0x4, &(0x7f00000022c0)=[{0x40, 0x112, 0xb94, "cd2000564ec923f771689c9ee70d6d2aee15e463ea4e95e5e91ed7847c6a54f8125da92e73c89d25d689dc82b0"}, {0x10, 0x109, 0xea}, {0xf8, 0x117, 0x2, "eccbb79b3c023adce75b9fe11f06fc0af80fe8b7f753a0b92b51a112589dbda557a8aeb90e45ede4d7226485a719a3828e5f1b845755d33716c3e2258139f282531bb067b6c6cfc8913b9e5fa7b3e6cab26a7a6f557919175bf542e7dd15b26064b725a49cf537be875b319d4c45155f5dfa4522298839fe5e5f1bfa34d696f1029c2aa88b2a31e30b9f3c20e069b3c11f36b4a1c1868e262b699d3f9483ee3e5362ef5198f0d75d8cf8a73b8680ca074daa91dea61e45d49d6725131fb50c2858e8bb5d3ba3c5df7b6bae28e5cfe7d6682168bff5e37a2514ceb9da232b117750b838adc0"}, {0x98, 0x110, 0x8, "e72769cd268b076cf495ccb00defa1cf6ea102612c022c26e9f01d98d5e9911f3814f0279b52ef567d9299ffcb2472d8ec367f34eb19ab34eb59d87da104c1c2a1ddbbd142af968d2d46a8e650ebd48f7a0504d4ec4a480123f7866e9bd53636f88fc2445d47c44bda7b656209ce6ecef091113c6c7929ab2d6d007f2d5c5f7392859fba"}, {0x100, 0xff, 0xffffffff, "32a5c5ef8516482304fb0ad81d4ddf8b7a372a96ebe3695c8b8db0f6f404fde51292fc266ca325da763283bb07e451b9065fc6ee2ccb26c8b9e71d6aa9da8f3c27ec7c6448f148b3c86bad3c5512547c9a0418fa803634ec1ba243f6fcc4aecf8242cd170f36413e568c94014af7a76f608712b8c9e41e28999f3079f6cf3ee565e6967cbf789662c755b6810803bcc3cb8b4c9aeb8bb98f51adb298c5a20a917687de131f0dbb8cf4659f0629b939563bd684151ad43783b967c42d76b4616bf014a559f61838720fdd48107ec607dab2b92d4696ed014066c4e9a2675df81c22c4475d805f82a033"}, {0xf8, 0x113, 0x80, "d67e0f13d7ca1a05cb3a3358c876b2e49a08634a744d922d7891c04a46dae97f39c8de305a563f61de95e8914db2b331edc62c0f9da8eac8977d0c6c7be5bc3c366c746b991c96b11ebd856a8a2202e44f1519bab7efefef9a22319e8ed12a46122886a7702ba9457e362ec085ab6817f8bbdf63d6657870efb8f66ed995c46769c02ad496cde5e6c3c3766450babc7bb491476bff779946320f787423debe6bff2f7bcaa0bd0fe41cb447aad58e50990bbd5bda7d9589e1fa98f09d090387e0a0c31e7a2a54cbb1a7f40e32d51e2650e10721b064223849935ae2cce4fe852c07db8e"}, {0x60, 0x0, 0x3ff, "c213ea31845dbe8cf87d303012ece3b06fb60033cc35e56bf4e8b7af463564e2e0f4063caefcb017998cbce3870c76075e03e02a43efb43549dd0d327c66ad948fdc0c76c037790690"}], 0x438}, 0x20008010) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000001a50000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='e0\x00\x00\x00\x00\x00\x00']) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0b707674692000001000"/27, @ANYRES32=0x0, @ANYBLOB="0008780000003360000000fd43f6005000640000092f90787f000001ac1414bb89137cffffffffffffffffac1e0001ac1414aa000000000100000001ffff11ff00001e01000000000000000600"]}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x98, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040015}, 0x8000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private1}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) r6 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="0173e42eb11400cc0956a0a2e653650f00", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000003c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1e, 0xa, 0x94) socket(0x6, 0x4, 0x6) getsockname$packet(r9, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x39582, 0x102}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x6}, @IFLA_GRE_TTL={0x5, 0x8, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x88}}, 0x0) 07:28:16 executing program 1: perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x75, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/mnt\x00') 07:28:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x81, 0x80, 0x1, 0x0, 0x0, 0x8000, 0x8000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2010, 0x1, 0x401, 0x0, 0x3, 0xd5, 0x8001, 0x0, 0x8, 0x0, 0xc3f8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x4) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x1000, 0x1000}) [ 544.838044][T21460] ubi0: attaching mtd0 [ 544.857722][T21460] ubi0: scanning is finished [ 544.878392][T21462] device ip6gre1 entered promiscuous mode [ 544.921290][T21465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 544.978655][T21460] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 544.988593][T21478] loop2: detected capacity change from 0 to 11 [ 545.022765][T21460] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 545.065437][T21478] kAFS: unparsable volume name [ 545.083601][T21460] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 545.166270][T21460] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 545.193395][T21460] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 545.233746][T21460] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 545.243689][T21460] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 545.257929][T21460] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 545.276966][T21469] ubi0: detaching mtd0 [ 545.277005][T21480] ubi0: background thread "ubi_bgt0d" started, PID 21480 07:28:16 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r1, 0x800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@dellink={0x68, 0x11, 0x20, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x50}, [@IFLA_EVENT={0x8, 0x2c, 0x100}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_CARRIER={0x5, 0x21, 0x7f}, @IFLA_PHYS_SWITCH_ID={0x1a, 0x24, "7769913c615a3c496b09a9b45fc48f31bc08a7e75809"}, @IFLA_MTU={0x8, 0x4, 0xffffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x811}, 0x24000005) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="92000000000000002e2f6275730083a68d44328254cabc975c480b43ada63647b0ae364b4b9dc350ebaffdd8f64b10dfc67aa4884b0e26a3e7402cb3478f02c5f5e0547df3a9"]) lseek(r1, 0x0, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8400fffffffa) [ 545.337447][T21469] ubi0: mtd0 is detached [ 545.386094][T21460] ubi0: attaching mtd0 [ 545.396274][T21460] ubi0: scanning is finished 07:28:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1ab, &(0x7f00000003c0)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G'}, 0x30) r1 = getpgid(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x0, 0x1ab, &(0x7f0000000180)='bdev!)-%+wlan\x00posi\x19Mx_dxl_accesszQ\tU\x97\x12=J\xd5\x8b;YE\xec\x8c;\xf7\xcc\xa7\x8b6\n\xbe\x01\x01\xae\xb6\f4\x87\xd9j\xd8\x0e\xc2\x10\xb1\x7f\x95\x01fE\xaea\x10\x8f\xac\xa9+V\x863Hhk{2\x00\x14I\xf7\xd6\xcd)\x05\x87q6\xed~\xd0\xb2\xf8\x8d\xaa\b\xe4\"\x1c\xbf\x8f_[\x17@\xe5\xec\x10\a\xb95w\x8by}/\x8cw\xe6\x99\xfe \x84]8\x940U\xb3E;\xff\xa1!\x9a\x87\x88\x02\xbf\xab\x97B\xd9\x06\xf2\n\xf7\x1f\xd8v\x7fD\xf2\x87\xf7}V\x89}\xf0\xb7\x8d\x85\xf6\x9b\xcc\xd3Lh.\r\xd3J\"\x1f\xdeW;F.\xdf$\xee\x18\x0e5\xa1\xfcN\x88`\xbbj,q[\x90/\x9b\xf0\xccr\xc1\xa8\x85E\x85p+\xd1\xbe\x10\rgx\xb8\x93k\x8c\x1dTi\xafq\xde\x06/ \x93O.\xe5<0\xfa\b\x82\xe4c&\x99\xd6psf\xa8\xacjh9\x8bk\x8f\n$\xf2\x06#\xc8\xd2\x00\x00w\x03,\xbb\xed\xf1o\xd8\x19\xd2\x1d\xbb\xd3\x18E\x0e&\x83\xdfWL?P$\xb4a\f\x154\xdd\xacx\x91<\x97\x13\xab\xe2\xdd\n\x13\x19\xb9U\n\xb5\xb6\xffBQ\x80\xe6\xe6\xaf\xc8\x15_>\xe6\xfc\xb9R\x06\xcd/\x87\x11\xf1\xb9\xbe&,c\xfd3\xc4\xeaP\x9b\xdf5\xcc\xa4RDx\xad\xc0\x8f|\xe3u\xbe\x1e\xd5\xa6\xcc\xb8\x86\x8b0\'\xcc\x01\x9bQ/\xf9\xa7vfa\xdf!\x1axt\xd1\r\xd9&MC\xcc,2\xce\xd2kCJ\x10\x88\xc5#\x92\xa32)2\xd3\xa02q\xdb\xe4\xe3\x97\x9d\xbc\xc9\xf8G'}, 0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000580)={0x40, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xe1, "a45833da1112d7"}) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000001580)={r7, 0x52}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) [ 545.603605][T21503] loop1: detected capacity change from 0 to 87 [ 545.637127][T21460] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:28:17 executing program 5: socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {0x0, 0x0, 0x30000}], 0x0, &(0x7f00000001c0)=ANY=[]) openat$mice(0xffffffffffffff9c, 0x0, 0x201) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) sendfile(r1, r0, 0x0, 0x4000000000000081) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x2, 0x4, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, r1, 0x0) socket$inet6(0xa, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x201) r4 = dup(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r3}, @map_val={0x18, 0x0, 0x2, 0x0, r3}, @jmp={0x5, 0x0, 0x0, 0x0, 0x8, 0x100, 0x1}], &(0x7f0000000100)='GPL\x00', 0x0, 0x25, &(0x7f0000000240)=""/37, 0x0, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000002c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x7ff}, 0x10}, 0x78) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="0100005177a5d4beab32101f", @ANYRES32=r4, @ANYBLOB="01000100000000002e2f66696c653000"]) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x1) [ 545.701995][T21465] loop2: detected capacity change from 0 to 11 07:28:17 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$binfmt_script(r0, 0x0, 0x0) [ 545.754444][T21465] kAFS: unparsable volume name 07:28:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000700) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:17 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 07:28:17 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x402882, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f00000001000010e813b71090000000000000000", @ANYRES32=0x0, @ANYBLOB="b84202000a2a0400c000128009000100766c616e00000000b000028006000100010000000600010002000000100004800c00010000800000080000000c0002000200000010000000100003800c0001000400000003000000280003800c000100070000002d0000000c00010001000000000800000c0001008e000000800000000600050088a80000400003800c0001005908ffff070000000c00010020000000cd0000000c00010000020000070000000c000100010000877baf26450d8bc000000100000080000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$afs(&(0x7f0000000240), &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x5, 0x3, &(0x7f00000006c0)=[{&(0x7f00000013c0)="bffdb590ca17f1d389a17b449261d3e43422d5cc296a1670ff4e0e3defcdb9ee526913e7d5c89591fa6c5ee058b03b10431b151b2f984fa333519e39c0b35726f371420e68f76e0d9c14ece5d8f5a92aa7f10a47904fa3b12ff2033daa34fb407f2862a9c51562ab0daf23c0dc0b0c45c7533fac3569a880bc09deaacc30f6c47d899201798ed0844440e67364a82d62958baf6d197e63d6fd51feb367a9a8c075fdf26ffa8381e7805e19d0c9774139305a9a0f69e4ae67dc379dd1be7c5eacd68b8c847d37a31043c69d1e31116f44c9097f49eb9f65a31f9240b337bf11a70c327732b868ce863b1ae6d5e979c229e2633cbbebfc9943afbd7cd03db8f3957198e60774f125472e99788ef309cc187decc3a4a6d7025e4ea90b4bc58e693e88e3dce122d0ee69f0f782fdc99d2428d908f1f68defb91af8633a9ba60687c12a35681782fd9fead2bfeb61276d7b940eb3ff349e8d19f66f1721f9098f6775b04702ebd07c10be337c055414b6a09b7b4f30d3b5f628f60f8eeba631cfe4d3fc367b4802f2c754863a9d8789cc456f817634a69b5b6817abb2aeb87a7d0c8ae5db2ed078b4befe9c919ecabd2f17cefcf418d55dd00d5cf8409657e9d8561e5883082b8400ad83cc66956dd4b78d2c7440081d8c3ee33c8cc5cb95b3a5d253ba01f5ad8e17efb8e46ca0b31841e1b3fbbddb62951307578676e64fa5c43ba5c475b9210821f3c87f4f68a7c2a1777c4a1dc2b5b62f1060bd0fc4883a462d48d34a8544f68fd1fe99371106aa783ad5dfc6a83a21f2f629ab7fc19bfe84b33f47302a2750837ed1fd274fae90f48e6c47a0bc036a8a5564d962e2664a8bb33b92c343c94b9061a298ea5bb45bdd749c9785142c56e6ed100c42b9f422cea4f3058e37069c4b8823636e6e43576de028ee1251aae05196fba524745e3ae1f338e0c3859d9e0968052b989786ae23a8b37bef22bf1f1c65eef1a0ce49feb96f97f75e9dddebbf7b1b0c1c007363f51d1d71972f3d942c80698cab10629ecb7c0ab6074181ac5cc2277d7238303ee00767de696e0e2cf1eeec09e31f085cc00157b1ed2dd5e517fa87b5a046b0c7e7fd6c005f842205b789cf001d202623214d4d07d6a140ec594054275a2ef599aa8bf652539370e45c33f190daeb49c5bc20470857f860a2ef7831449255aa15c1ae95a384ec1523e9c72e8e7af78d66848aff052ea730f48fd183fe52f1d66f17a330285568eaa04defaf4ca3352042c41cfd7f746737fc444fdd078f40839246f67efbf684c5f6566580879d09154adf2e0a5d5729d3a87f3c68ba91869ccbb67501ece0f7232bb700d81d4c91a116159858fb7edbf33b30da996af6f5e3ff9f55ebe7283153d414b58ba9f7c2324347c91953eddf31305c8107a42a329a2ee43afd81ebaedcdc15736eda2b2bb3ae4a6aed430d3ae7c2eaf08a7ea8aedd37748ffd4ccac38aa5f374f2c74cf72f881d0656ef098b0822b23a5535968af5deb04dc28d0ff42e7fd096cc19f2f0e19b6bfd45f847002188d414175d318d038aa7701b04e3b98e73a947ffa72ae1fa6e5167730a5ca5f43616b2467df721ba2edd00d41dc8e35d5f05f08f93c2da2c1c9d5f777aad9a5e7a724b88e75ea9e0997c9afcc328ae8829f26efb5cc82b3f0845863dae251dd549752763a8d64c9a09d94b76ab195a945efde416cb9df8d0277ef208c430a943b48c5a98c37801ec7e8bb230dd10aa31d92940e7db24eb17b1a4935a791f2fce9f5c3719f9183b199f2370b82ba597c083c658272c19886d7b211c1bc106884ce6451a9e0671b2d9d656fee6dd65cc590328d8e22b4df2ac96a70c865beaa7af49210e800ec8bf5a25a53b77ee1f472035a31cc70046f828c05aba04cacf91a08a41f8143e52232fc2a3d3dcaf66552c1376c11efa7d3aeac48bfe210932b89ea56e31fc9feedaa9e26cbe67d28f7eaaabc0e6b3649e1e44db7c2b08abbf09d0b79f5917e9c2b874d6a793b1ca0e1e7ebbad63dc63d2a76f9db9c4a253bb885078a224b28db1724000b6db29c19a3b41be10a3b6dea064b21e93d851a452494f233080e268bc7367e7cbaf1a5d2c1a4990a33ba63bf99943b19a8831a44547a775290648761ba77d5da7238f50fee4252405dcbeb6022e86f8ce2ecd0f5578403fc02e13b8b2b55323f12209fbb82ab304e61d37eb9713c9ef6faffa64b858088adec143d92031f24ceb92f3af8d3d7cc3ffacb878d1fa02a2eebf8f64ce51777db6aac1f133e0270cfb583bef79ac6db5fdafd23f6a05d17a2d9017eaea4e181704013fc6a85b715e53894aebcdbc5e921a61f948971d63c6e8c2ae705e98a15de6151c49ef94fdf5293fb918a0ed88a04e6b730adaa353dfd4ed8bf8ca2fa653cfc5c10df0d631160dd5c9850c49fcfabfa1ccdd6face1926729e686678f7257715720ad005a92901f68f61988b0a95414bf14a542e98f04474329c7f78b95bbdc2c2304e5da32c04c964b5a52cd719ae3256311a15ab0c3e3e5d1b56dd32e9a4b698595039c385f4445d9e76ae9d63d24d6fab0b082ddd115f9e73aa4fcde3f5e7ee1b0ec849154a19f8d0a0fea3231cbc69d67c438e296e0450c12de5cddd8fa18a6d0b4ea9a2512a6eb34fc8ed53dd5ddd6da79a05c492916194277c592b2d09cb544f243dc2878136d7db7445240efe62c8db855f1196adae534937c057fa09b70c107f143080160b1ceb77ecd447aad166242185457b02d0988a94077c99862aac62e0966f7b3b19df24ef7431d14edc03e47da9abd152edffb3eabef6b2cbc41bab8198f4d50cefc7505123b323e24bbbfcc44360fbb2714b522596748ae2ca9d65eb6c03798f80d38e67647421fb98ff5ac5477ec84eeea06e3a34613be96b31584e25b669e0da76cf0ae923e3d024725f9b5bbcc3895ea2c31b90d07be063fb723186aa98130561455ee8d817b05bada4930362cdcd344d251b6605b38133cb90f42958ab96f960af70380e3b5b8cfa8ff3be36854dfb640ac3cce956be8968890cdc34d6b3311d26c2bca78d008884d57bb324cd7727825d5bfce300133bf4dbeaaa2ddab5e8a73720f3f052c581441bc0a9332c891c47f1f2efc84ee3c9f494369244fb0eb1c823416f675786aa214cb00839387ca9c8741660e471e54b4699ab939ee475f1aacb79c3d09cc2505d8d81bdf7710fe3e5b0ea67021475a6daa54c93a604e743fb4a2aaf9b6b42136837ab296952524f1d8678cc91608e0c77fcbde6b84c14d74f650df9e05b58b7423c26575c29084940efc620603965eb0477f8c46da342eae72dcda0d21c6d2ac82a0b31db1ecabf74ea0eaaa69ad9e0aa0b47cf082c3272d979fc25044809b25de14bf0579708b2403de259ecc4c3a4dd245379b28ae2dc720298379f26c6699460b6d9ed946536db6ce4b6a28f7b1b975d1e90fd4eb647c880f08f199f69f9a8485a1418223b77168cf50e83a1dd229c82c562fa5d9b3c5c10ef56bd262c51718e9a0b24e66ca2e9448c7c9c7122dae9457a828fca7f44753cb93a6fe2e4be16cbe8bd3a4c82c94ae28bd1cdda53ce60dc91b24e1d7c1ccf6d9dbeaeacf5ebdafc2a821ea8e57fde9f51a7392185ee7648de0a94a46c2163fcfaba9dd04c81f0e5a669c80b3a048b3a2404bcac1f6452c3c51b3c5908dfa992138944427521e7c8cb69b010248e4d1cb4423bb4d6fa80a3960eab5aaf9e3dec4e72dc9233d94b6f52b687571ad2e103be5d50fda34b1a9c16f26a48718f815b27064dbce935f47880003d3bd9859f8d9368b38f8ac1dbc5e761620099d68c2a55bcce62eb18b03a50816eca73037ce3e70642aad3358a9c71b2cfbf2b9c2686c4f339df3ed7b28040fbf83858ff472fedc8bd7bbf84ea7e5aded1e82789c9abf123f99d09a7b06508af4006f201a1d139ac3a831ed98a01761697f0252a006be68c24936b97ea3175d4eec729c40ec24d660d9276ea70018e7f8d1d6abda32ffeb90ecfdba73b36411743015e24a57a6def2c832b831b9c89354e3dfce4d004fe04917f0c7cf1d481cc8c3c4cfe8083f915adc9f94fd7246c616ea7642fd877bc5fad7dd84f323bccff510da9bd24b6a8dfe35aaeabc609460b02ac3e5a47ff0d9eb8b9a4f57730f3631b7291b26f477b973fb3a7edbdfd3cedb38026c0b36d2e758510aa52ebd707b2803cb01eb08ad50c57a853851407f968ad914d5c7d6908fb4e5c6d3126c69cc959c8717bda08e0a1b7fd840bfc05f9f386db14caf1ef578cef73d543e5a1484863472f02f6be62a3b364b8a0f4cef605fe065eca82a260533ba47cb721d4159e38c3773bb6f57a6a3e01b5f82aaf9460327a0385d4ee190a8c29e3e8790a1cb365f9c043f22f9c8b3a21aab4fcb5b8d0e1b245c3616eb4cdc20131324f0459c371d10747c75bd6cbeee54d6d499396cfea08591c5c2e42a7c293a5c44c01b67b0a441742bf2a2ef571236c5e98103651a3cd3f1dba2f6146b02fec9f916c630e063cb0c9847bf3ba4ad82e07b93c4c3fcc14423b5472c0cfe9b4d58fb68966fd0dd81e73dd77af5a3a5c1b3af671e5b31d2fdaedfb0f0da19e8b719ef466be80cfb8743e502bc669f8e19777cd3db8f711cb4802c6f11f3e5ea13378847c16373f5060b45895481b0c7a45b119dd02ba48fd2dab2d4c7b31069e7d68db555054c06109cbae69a8a2fe1eea07539386d55d646f9dc27bf8a4396cd978786bab9ca89b794aa5c2b6c6863baece56d3e8ee9b9d7389ffe353862843c95b29f564f8e7d3b3e7a49b0aff50e0eabb33c52ae1b3970b07b3ade80b5f4a8d279ebf68859713cc67dea994404a398e25d5da71439874f1ca62bde32db55cda9784e9378952f1f1d498180e9dc9dba3082c1aa1a14c031180ce8270953947451fec4af8d86c0912d2cf4d987e99d304aca412fac5947207e6eb99c75cc802ab5d66b37136b0b6ecff94a3dee10c3d2747984a61b13cfe12cc2d5dca7f139dd70ea8c0a0c469a38db74a42885ee2068ef175c169c9b766211411771add2ba6cd2188119f82e7091bde360248c2d96a139170d4cdfdf60dcd7734a764e70f5b4000cde06cd0added039a6a31db0a1bd68c57e726f2277cd666b2a0d4f964a6b8f846faf2c4c35ba907a48528706fad0e4ce2a1ffb52ff469e369a04ee46a3dda81c9f596353b52ad2b20d2e08160d1532a7c7332faaffaa99a155f7b4106a2e11f73fe28de73d58b8f3ea0f491d4f5011c75d3dca193ba8c553334ce5d0aefb1df21c75de1382434ae8eca55e5f8a76b48ea3730ad2d0c5257f0111f55b024f9740ae6a8e0519bbb4c7011a8f48803451336dad151503efc4972ef5ea9f00f8dcb8b40b5877fdedb7a738211805473195903af4f06ce8bbeed23a1b126203b786457adcbe67a1c5ea0e8bc0c1453946e1b3a36dc4acb2b1e706ed33b3e75e5b0908082f658db67a4c1da2fb115dd896c31d4e86e77eabf5d1973ab5e17c51d535fd4194a9ae82d871bf0072184c10901c9961726975495365cdb6b3839d957849c0237a74bbc3f9124ca032b7ec658dd4fba0162eb0c814b8952df5d24172e68dab1362dfc83668f53f740cce3a5c08fc78db18d11974b0e2b8d73d95616118ab3bccb236a1fcff9079fe4e3c46b189b651b7375791ba8d5b0e96c4a0ad9a079e534e1c08a1e6ad2cf41895523f8490656d1b2fae267a1b762774e43834955adbe61c95266816f5b45cbf3d93b46aa3f0f8d355bc947b1f6e7639b8b6414c9c5171db33cd6c760b9ebe2", 0x1000, 0x7ff}, {&(0x7f0000000540)="5a252d9a9acd598431d9957d494587714a485639fb17baacc24c02485a2a14279e0927bd946697b6d7a34ebbf957bedef5b511239bd2bd9b314c372e0c6bbbeab5e5104a3ec93261b5f43f2ddb194baf105407e65319bc00f866d07a919ba94e1786ac9817046f40519b737a58e92ec0cf6dc9f985e6f484ba6740eebac0c1d72954795acd42", 0x86, 0x9}, {&(0x7f0000000600)="d6c17f76506d4152b2b0b6e44804255e6c54bb80525f89b362a7eec84d014599645ab2a9b1cbc9d3f582caeeabdc2dcbf65966dc7084c705e72fbcca5cc6da697a55f9916eb7f230f6026be018784a7222913d6be6210dc58f7a9a50e32bf78a60d6eb1793ee7c5f84b2b880830c8012b04f4e606ae219b7a9fc0151d9bfbdc590294e66acc1e8e70ade0179badddb90801f58c39a8653836d071955b25b8f14e56ac9ae1ee7033708e9a8362c176815fd060ee5c340cf10be", 0xb9, 0x8}], 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="666c6f636b3d7374726963742c736d618067a51bb9ae9d64d9422123eec88d51636b66737472616e736d7574653d2f6465762f76637373bbe0266f6e745f61707072616973652c736d61636b6673666c6f6f723d2f6465762f76637361002c6d61736b3d4d41595f455845432c736d61636b66736861743d2bf72c61707072616973652c66736e616d653d626f6e642a72b75490db5ede747970653d002c657569643e", @ANYRESDEC, @ANYBLOB=',\x00']) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') renameat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r6, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x2, 0x7, 0x8, 0x6, 0x0, 0x8, 0x80c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0xffffffff, 0x800}, 0x4, 0x9, 0xa6, 0x0, 0x50a1, 0x6, 0xfffa, 0x0, 0x5}, 0x0, 0xd, r6, 0x8) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f0000000200)=0x6) [ 545.882408][T21531] ubi0: attaching mtd0 [ 545.888091][T21531] ubi0: scanning is finished [ 545.897744][T21526] loop5: detected capacity change from 0 to 4096 [ 545.949600][T21526] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 545.963032][T21532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 546.085376][T21531] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 546.132963][T21531] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 546.147695][T21552] loop2: detected capacity change from 0 to 11 [ 546.164291][T21531] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 546.175034][T21542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 546.241589][T21552] kAFS: unparsable volume name [ 546.272228][T21531] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 546.341359][T21531] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 546.472157][T21531] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 546.607125][T21531] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 07:28:18 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) chdir(0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000840)=""/151) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xff, 0x48, 0x81, 0x38, 0x0, 0x1, 0x4400, 0x823a0f81da40131e, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xcd9, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x800, 0x6, 0x700000, 0x0, 0x4, 0xffffff34, 0x101, 0x0, 0x5c, 0x0, 0x3}, r2, 0x4, r3, 0x1) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x200b001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xf4cd) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40000040) bind$rose(0xffffffffffffffff, 0x0, 0x0) [ 546.684911][T21531] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 546.843061][T21547] ubi0: background thread "ubi_bgt0d" started, PID 21547 [ 546.851860][T21536] ubi0: detaching mtd0 [ 546.863480][T21536] ubi0: mtd0 is detached [ 546.868110][T21541] ubi0: attaching mtd0 [ 546.875523][T21541] ubi0: scanning is finished 07:28:18 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000003c0)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) pwritev2(r2, &(0x7f0000000340)=[{&(0x7f0000000180)="e1fd6a9d7d5dd057a57ef7415845a954b847e6e2857f657e71f817091e2f5ed9e59ad52c86c44b20d407f1104f4b6ee63a1864559a227026c92a687da491606924572ebc8a3b80f33ffb9a2304d98f32e5e0aba117427c7507e179d5a87ceffccda5", 0x62}, {&(0x7f0000000200)="a8712f9c2a55c1c739dd667d", 0xc}, {&(0x7f0000000240)="127b02408fb5e8314b2560998ba0550ec4cd52b6c5692a5d0257347036bc8e9e2a1914e654723d56e547ecaada45ef18c2aa946d6352aa18f5839873a9c840519878f84c11649620643733ccef0575861172fe3d1219ec23f2b125eb0c900894061e37e1993f7f3f6efc90908fa08b81ed3a14d2add31285593124dd065ec3f7e93c8cdae2266532590ffc21a5f637098be966331d1f37de4b2dda8ec233a03dec5b9e90f1a6931f45f6ba4b8a9ec32e9613b82b1d20146a1e3c3ebe68715fd27c6c09478fa5b7206aabe0e0c4ac532761fda94b25bdfbfc85aeb80819ff", 0xde}], 0x3, 0x5, 0x8, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x7}}}}]}}]}, 0x44}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = openat$cgroup_ro(r0, &(0x7f0000000a00)='rdma.current\x00', 0x0, 0x0) io_submit(r1, 0x6, &(0x7f0000000b40)=[&(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x7, r0, &(0x7f0000000400)="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", 0xfd, 0x101, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f0000000580)="96e28ab05f90440a7b1afd0af131e6e365d8ee62080acef2763a7778bcdd437546660fa625e0be9a6aa85d48c90803f311bb65157c0c2577900c5a609af667e49a097724ed5de1df594ed8406b271373f205eb3fd3b2a752944e770014d1631f5f275201321ba3ac2ba6c117c7d06cf16235a0e32141eac15672ab4c10901d679fbb9528c421be655fcae78045203859896fe9d10ba8330470f9791a94996f0c1e8d624db41636c86b096bdb99d3275d43a4897e779ad27453234e7238d999e7f66a3141e603d8dc0df7868bbf56b8be50", 0xd1, 0x1, 0x0, 0x3, r0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7554029aace599ff, 0x200, r2, &(0x7f0000000780)="ea745cf51dcd8250185cb4566dce3e2cdcdfdd8c244e1de92c6aef42fd23d48de696476006c9966ac278d2294df70cefac60b0bc732c9feff706b91264d2bd7e1781dcab670a4b68515233c0af41f312246a2709cc3e8d81a58a05344918250be4576df6452630", 0x67, 0x5c09, 0x0, 0x0, r0}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f0000000800)="261c4615c1be73e4824f8c29e47b7fbb4ed9ea1e2fe275e3c688c3736740685d8eaedb32059ac1066871c06603a0a73eb0c6666647fbcf9cec90019d36b93d664b069c2bb450a89ea64d3387a3c4a4cfd9b4aec02722770c08a9aec640f77d05538daf9fc25c2fbae5d7cc2dec6b5a9d5fa66cfb7233dff1084405083875631e2f1cf715e1de976ca3581cedd5b6d90ec2f120bb5b6a7752866a4e3f513d2d9f235b203966090dc9ee05936312f7d5caa53d2f9d615785991e6fffb5736a4efe35c51d1abe9b442fc45910c28486b42ecaa954a4", 0xd4, 0x3, 0x0, 0x2, r7}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5, 0xe, 0xffffffffffffffff, &(0x7f0000000940)="ecf9eb35acda1a7e8129446ba68ba7d8bd044654473e36966210eee7c65a4426e5d9c764c4df8e5891515a394f40c4337404df60819cde62874a72aabdf8445de58cce29e9d6d92ceb7a0188f594628b66e4e04f89d9ea0897464f41b07a4c915257b11c7437b4062dec0ded6210b9515d7bd31242529a6d6154c922fc27c65036267b8dc205b3c1169c740f0bece03ac714a39a6c629bed2afa4128186f088cbe46eaf7112ca48ce36318a33433b5b179d5aa", 0xb3, 0x96dd, 0x0, 0x2, r8}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000a80)="12bde76fbf06b8741e434e659098e4b42cca8c9d8f8971c4f1e6a51c33f8d878f84c6df8a1b9ec6f83554ae21a7845a967ace3372e1beaceb0783735e44e93a8705ed2abeaab8b970de4d327974f12fa9730082a", 0x54, 0x4, 0x0, 0x1, r0}]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x4011, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x3a5, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x16006}]) 07:28:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x43408) 07:28:18 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x2, 0x20, 0x100000}, 0x2f) close(r1) 07:28:18 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)=0x4) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x80, 0xff, 0x9, 0x8, 0x0, 0x100, 0x8000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x40000, 0xfc4, 0xb4, 0x4, 0xb948, 0x1, 0xfffe, 0x0, 0x1, 0x0, 0x7}, r1, 0x1, 0xffffffffffffffff, 0x3) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) write$binfmt_script(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000e3154e8a3d70ea9a655671fd1aa4ab1c28463dc00377e5147a4393357cd8a47308ad802c65a0709199529eeb65", @ANYRES32=r6, @ANYBLOB="0000000000000000120009000100766574680000"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0', [{0x20, '/dev/ppp\x00'}, {0x20, '/dev/ppp\x00'}, {}], 0xa, "85f33d3979d6b9e14d7eabd25b85328aab47a619d7911ea6a727201caf2c4d7b78e36b8d27d886c07e997c22aea5ab17b4ed0d4a1351bba4f628f6f08982e66248cb0abcb44a3a98"}, 0x68) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x140, 0x0, 0x1, 0x0, 0x11000000, {}, [@NLBL_MGMT_A_DOMAIN={0x111, 0x1, '\x06\x80\fl\x14\x10\xbc\x90;\xa8F\xcd3\xb86e_qS\r\xbc\x88;\x14LfZa7-\xbf\xf4\xd2\v\x8a\xcdB\xd2\xa61\x1a\n{\xa5#|1@2FMr\xf6=\xa7\x88\x1a<\xf9\xe4\xb7[)\x19#\xb4\x83\xb7D\x1c\vCR\xf6i0\xfcRH\xb8bs\xc3\xa4\xb0\xe0l\x95\x7f\xa3\x18\xf7\x04\xd2)\xe6@\xaa\xe0\xcet\x99\x1djz\x1f>Ux\rp\xd2u.h%\xbf\".aD\xf8)5\xf47\x87p\x18\xf4\x95\x0e\xa1SY\n\xfbn\xbe\xb1\x9ef\xfe\xae\x14\xb2\x13\x88\x06\xbd\a\xb4\x90\xf2\xc5\x04\xd0\x0e\x03/\xde\x1a\xccNT\xf4\xad\x99\x83\xaf\x81Nz\x95@\x1e\xc9]\x13\xfd\xa9\x93R\x03\x1d\xbcp\x82>:\xc9n\xe8\x16,\xccu\a(h>\x015\xadd\xce\x99k{\x91\xd9[B\xd3\x1f>{\xf6.\xa3d\xce\x7f\xb0\xea\xe6~\xf45\xd4v7z\xffJ\xdeN\xd7\xb1\xa2t\xacj\xb8@\xe5\x98\xb6\xf3\xa0\xe0\xbc\x1d\x00\x0f\xf7\x00'/269}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x140}, 0x1, 0xf000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8540920}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}]}, 0x50}}, 0x4040800) [ 547.149047][T21541] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:28:18 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000a00) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 547.235347][T21602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 547.377039][T21620] ubi0: attaching mtd0 [ 547.395892][T21618] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:28:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x9, 0x401, 0xd4, 0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00c642d, &(0x7f0000000100)={r5}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x80a02, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000001c0)={0x0, 0xe}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r8}) dup3(r0, r1, 0x0) [ 547.430942][T21620] ubi0: scanning is finished 07:28:19 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x9}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09f07fb2ea80e5cf8dcf819b5c0c00000000000090af27db5b56024df96b4673b4e8d5467e3554508535766c80114604eab9b290a248a1a0c9c6e39f403ff065fd3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c66c01e4099f366b89ab63ecf92b2704550a4d1dd5c50b7420b48a93fe94c756108afcd0b2eb785632e0a85f02a5a6474ae549070000000000000094fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba00"/346], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x27, 0x304, &(0x7f0000000040)="b90103600000f000009e0ff008001fffffe100004000632f77fbac141441e0002028be3e7d2a182fff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28) pipe(0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x9a, 0x0, 0x10000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x5, 0x400}, 0x9012, 0x0, 0x0, 0x9, 0x0, 0xd5f, 0x6}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) fork() pipe(0x0) memfd_secret(0x0) [ 547.538492][T21608] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 547.597896][T21620] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 547.632931][T21620] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 547.704824][T21620] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 547.752325][T21620] ubi0: VID header offset: 64 (aligned 64), data offset: 128 07:28:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffd32, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack={0x8, 0x2}]}}, {"c5f757c69b5a0499f5a7f68e1a7abb0cad1f94caa8b81a3461727d00f4d0b47d7ec2a3e35f86ba0b4fa1f0cd07c1b763569f92543b880de454cca3b29d17ab24f9dbef79af007393f6f496e50cda3eee04888b27576866f99be26fc837caa965d1d909a4d3117858a15e7708637920ddb23de876cbc98a9045ccb87bc966e493398a7e6b67d8854c9f9ec4e245311f35368821ec022d2edc513ee1574408bba3f837e6cd033ae375e243ba31a1f30dcc9edbdb06343d12df4386ae00424d73cfe0088ab68a2133314d5977ae"}}}}}}, 0x0) [ 547.796011][T21620] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 547.831655][T21620] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:28:19 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x3, 0x2) open(&(0x7f0000000280)='./file0\x00', 0x10000, 0x8) inotify_init() r3 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000600)={{}, r4, 0x10, @unused=[0x1, 0x1ff, 0x10001, 0x2], @subvolid=0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"5e3acfc1578958c17eca5ebb7bb45d67", r4, 0x0, {0x200}, {0x0, 0x7}, 0x0, [0x6, 0x995, 0x80000001, 0x7, 0xfffffffffffffffc, 0x0, 0x5, 0x81, 0x80000001, 0x5, 0x1, 0x0, 0x32, 0x3, 0xffff, 0x1]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000480)={{r0}, r4, 0x18, @inherit={0x70, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000005000000000000000800000000000000070000000000000005000000000000000010000000000000ff0f000000000000cd37000000000000010000000000000001000080000000000600000000000000000000008000000001000000000000806400000000000000"]}, @name="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"}) r6 = syz_open_dev$hiddev(&(0x7f0000000300), 0x10000, 0x24801) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000001a00)={{r3}, r5, 0x4, @unused=[0x4, 0xfffffffffffffbff, 0x1, 0xf84d], @name="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"}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x2, 0x3, 0x1, 0x1}, {0x3, 0x4, 0x1, 0x5}]}) write$binfmt_script(r0, 0x0, 0x0) [ 547.892763][T21620] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 07:28:19 executing program 1: socket$inet(0x2, 0x2000000000003, 0x2) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={r0, 0x7, 0x0, 0x2048}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='memory.events\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x2000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x30397cfbeca4eaa6, &(0x7f0000000080)=[{&(0x7f0000000040)="e028030029000305d25a80648c63940d0424fc60106c11400a210000013582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1932) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000340)="66530700ae897094e7b126b097eaa769be7505c41bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f715134d82ce9c0952d644157684e3dae491de7642a7c52cc2d523be91b5877341e0e1dcc2025aa18c9228103b66e1d49d31d322dbecfa63da445b8bef5bd9125939f50bd2d4ed96a074eb04a348a666bf58b23ac4edcce412245deacb1f630e4052b9d6c20a45c772242f63a6bf41a08f4951d60a70381691f296d588ee40d58160fa80f4e9461103fa13cdce25381a61500f763b300ac9c3b7", 0xe3}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x2d) tkill(r3, 0x34) ptrace$cont(0x18, r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)}], 0x1}, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) [ 547.954301][T21620] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 07:28:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff7fffffff}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x40}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) modify_ldt$write2(0x11, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = fcntl$dupfd(r1, 0x0, r1) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000340)={@local, 0x0, r3}) perf_event_open(0x0, 0xffffffffffffffff, 0x80, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000013c0)={{}, "cac058b2f6f20f74d50d8bb8f79c7e05a6c74a423d56583976ee80c6d04b0849dd52a755bbdcefee9b9b022d4ca7a6574498c406fefa61b5eb6dffea9da4b608793c50b43c0bd6151bb148a535ec90368697aeaf0ff2dbb3cb58eda7095581b48dc38cb203ee4e9efaed14adb71f3c139990c5813ee87298473a9947597df2bb42b452bb694854f4f2e2f03df5af4adce4db16cc8a093c6467e82e1678f8be70faa326c2a91023904cf0a6dbc43a02440d90569fd71d01ee8bbb2b4b6389d59a4d59c5ba3287ab46337ad5c0da7cd2e1460fa36b7b0db853cc60e4fcfe3e0750d2cd7f554e0025d669ce30b0e06690c3f202bc95d44a68c3f4fa0b9cec2fc939c5c6281da6a46ab19ba299115323bed6597390ebac277576d7abdcd9d880439d477e1d994c3959e39c4ed8728f9f30d4f8ef2c67241d365a7d2baa5b6a5991b0b014d3d3c249a0c8283c565bb0becc29fa010270d43df84413c58a1aeb996fcc1510458c25c0351ca41620e5f38fd137d84e1e65906fbe649574c5904b021d8d92bc50514dc4db5e75a67ddad520c471a0c360f85fb998b23ea8ccbf778cfff8f37f11f4fb167b05c1130929f2e10c4056b156bbd78ee8b12aa71f3e73d24a700d75d2b375cbd693447559a7e4c183b4542f523bdb1563a3541fe7e5c9347a40bdd0c8475dac60694d35915cf7a9f73a3880323a6432b2a5372af7448f47ab596a623c5b0b0eda1be0e9ccd562ca4055c7e3cc4f19c5a4132e54faf62d0ec11ab70195f29f94bfcf67677acde1bdff646545e8d480b8c69218f96b89933361bf5c6c7e6ae16b377646d7e53d451071d02cbc2b32ed332b13a134de62ad82d196ea53b3f963e3b1cd529e7d81b6699f1693605283e37ef9ab0a25dcf130fbd9ae897fa4d9427f5e5a0098a11237f259622556c24f4cae79c7cc75911b7f8b293dadf0779c0435cfb363874e01ab08c2858fa12f21e6d7ca465eaebb127f73969a03e3645aa9252de39f3e55d75db0e5e400d3f6119be7631dcedebdb224d67dc569a6ebbc8430095586455ddc9514115e1bd39c53509a10c8517c4c0955b619f2dd5e42db4b87c3fe96dd06bb7f928bb8eac10113790cfc65d60b352f5e37658eae8c9effd7c40cd78e0315d572ffef082a5a6d11ff57e88b2f4b63790be80ed132e59a36d5a68f2f6049aa4bf023f654c2190253b4492e2c715274d26d0f4a379755dad2d658e4c6b53b4531866c582a0a7b3f6021d85a89792e775602fa06e695b0f99fbc3d6196f9e2976c9061d0d19db6e7c9f779dadc85aaf40c6cc9a20a76f9298498ec77a20422d041d94cb5243fb0604cdafc79e278eea2399b1bd4d896d52e55e11bf36f5c7e93aea250aa6ee82148f4ca688ac35864cea1d97b3d78a0502443d57745d9c44bb992d3e8481d89c99f4a751ce248fe5204d568950c04de2dc7986acc9fd2dc5aa53eeb61f670a3341a19693438eda6b51c7a8eca02992dbc7576df50a041db30b319f0e2ecb9bd01c779153b6861f775e9de09ec3facd8f3a2cbbd60c135c1c1a85b2202234652641ffe69874bc65a588d39939b7d61b6ff750e618f640f153d27d69dad64111a63a4f3987a6b131bb031723f4887102c9f6ddef4e0a8c2f1f3fb5813015e6c2b7d85795882cf7a8f656c2a9ff2212d3e1c21c8342fef20b46be8391ddd9acec7a22b17b8c4ff18d6e2857ec3abe2a078f3aac42f8ccacb80f67058a33a326738e95812d3dbc7fe943970c4a97bff34ee8dfb8b7328c28a5bfa77069333dd63ce639f70f24f3e124e5567381efc26f60d0166a38045cf46cf4d54b0dd2b1b9ca60e4eae6f3512fd80976d25b181fbfa53078ec43e9718d72cfc8d7a2a74ae026c24cd105e436d6e2098e2d7f06da85560a9bd4ba91e90eea755517ef31b4b5b807546f265ce2812b10dcbfe113bf501a594406a862c86e1a460130dcb1e546723b712ee1b5ef43b1b4b6c860e023b139db8637cb7a552f9173085a4722f50b16a99b06c36dc6cd80e546c064122d39051c5b45a20e8b130c339b15c4e9646e3464170d512625b6072293d564867153123a174016f9d8ab5531c130cea1cd5ec1bb753cb9c8a1643faf84d7253aa21c7183189144f3571c1e02ca60026794c9cebd556f3044d0548354f07e3d0353e545cf8e8375d69f142351f974184d32165a66e4d40a0fa2748357187efcbb103b172d46330ca63a46f7c14450f755cf0e41b9cfc582cc95a703cfb9e66f568ec4f539068a387a41c32bad92bb6c0398b311ffff433678c678f40ab2aba14001f2988480db1be05a0056d574cb65f07ac9935bfada99fbf1a2d97c0daa2d7ceb88224982ef13ebba0cf6bce655d68fbbcf914643178b71f064a6e010f8f90b1dc29a40c656ecdf7122d99b6b08e09656825f571c41de26bae0c88507344f8cbf8fce2bb4fd2657771719d9affdb04ad782f95c8950d7cdbb0a665858f5355712c028c889647ab454c0737f6516174b2164c459eabe1971eaf01274d5746f247a68bb90c9e8a22f36eb9b31d8924c16b0405f78810a0fb5d82c725bb9d5aec6774995851327dcc6ac6a83ea6ca2a2afe193c9acae7370b926139a9ecd9ef8a7490de7117286f81ef53b56ab402319ad3cbbab2f3015af2c6b66a88211249b3e62f993385a3747837d336dc955c07e62f9cc638d6f67de6d103219cda7cfd385b0200a1c384ec40b7974629243a041686d124a6f2a98c34ac2ac0684ea555cb11501ca3d2b0db97480ead9fc07f02aadc0d5c9eebffca3cf60ac33b65b5c1caff660eb935dc4b4a694d536c9c5e3f634c321cb4f5aa6a3059b28cbc0a200edd40c016e7f9444cb2cfd4c8d6eb290182a622979c3df5cc24171d5a5ca4fd938347426812f9f8cbc9494e723bd8aaa5dc382aedcc29e2b0ec7e54e0e2f174d28bd69c27a76b8a7f3d8612d5e438c88776c2548f51ac1ccf07e2aec0a18b181dd44bc5326d24df366c7d5342664fedff68d7117bb4c80b2cbd863889057198d267d92828b39a2a5fc4e409eb8a1f62971cd44cd60780c6436ea07f09a8638528b9e9e00e9b9b07c0e08b417f35e2eaf25a28401d9d9d1cb1b59a27d341c88b306d02d524b50e95303051dfe49a9305668e56436f1b97051868fed74f59c97b9402ca0695a4ac9cbecfdcfb771b871c15c977989bce67df7b0a6496e514463e350e1bce57b4e2e6e926d1291e5a216789099939d57b1971fb6cb81943c9e67abab35ecfc7a401abc3c43645b7110c3206f9ec6c38d9d717db377855d7c3af1da271d5350da91bfb47275eeff27ae2cc7880040632ef3c79065aee2d785a738c1df8a3c4e118e7f4c71454eae5b6f3ec8ccfea980bd1190576551b7f7a8fbd95df470f62ca8852522d202b40eba68f965a3d6bde1fb0c33a26bc46ac2ea627794efe916da5273afd92ae3549beaf738eaf26d3267bd982d3125241c4ea6c0fd17567eb07b235c50c9ea00950928844f9260339bd8717b76988f7e6bc6706acdcb84dbeef76f5bf0c7e4f3c35b4e4b5d161c39f903e6c9a29838fd3fe985297855570cb78395f52542032a1abc0094e4b54bbdf3f74495d6e1b955092916d0077329a5ab6dda82bf509437b66b80349e82596c0bb6eb2a3cce8b9cefa801dc7cdfd065ffa266eb522624484ccc27321ee80efa4f1e90253862ca0daebacfc9bf1aab8401aee2b34892bd52fb7036483750ec31b3a601e0db419df32af4689b38770d41252aa05cae4cfc0a48eba533a63721872fd2ff46a023fac740c22dd1a622230da93868b3b4378adcf1c90676eaff0105320be51430a05755cf5eb4ac89062fbec06949fb8b83f90a6832b3a590f3a4c7966bb7a40f1ca24d9925604201661ff2b61702142162e6c01d246876943f98c9995f7f6bb037b1fcf45de1869dd8b4ba4ae2bda745b0a0ed052347a3c8adf7db1e915d77c0309bb5a75ed88957fb8579004f583df8e9e6d75342c2572670689decad275ae435d071bcabf827eddeaef9c565f1a4f619cc5b546150739dc97759ffbc98d4d312cc6db69e008b157fc9cbdfba6cbe93cacfec9f946ce6424fa43f21696079d2ff6e3ef7280e9df3e286d93e3de62cad0784f24e9c152bcba805c404b2c821da51b48167b516970ddd4474d7fa64af0b12a9e9b668705a992e226370d83c204419d67da477704f38ca894d53438a6460b1f5a6042acde3755604d94f7d7ada52f0e5b0f2113e8cf39564aaf44ef0ecc6e12f665c539e69a7a54ccde4a12345c69d2741930786e01b8428afa3fbc31f44eb1b0698df451a719045e711f87aead86ae4cd3bbbf434bb2f2ca85631fdbe41aa4130cecfe3182bb82f115181baced68868529dc3bd8012ab4c57854bf91812c93993dcfae7553e0a08a80dbc3fa44d2f16fc34d99ad8d8e4d63edd85b1be16d63ce729b732f540612dcdc3244033a05d2fc905b66474697bf55f9cfbec1fda672714aa776cad204d4e9280195822eb28a474aa4068820bac0df5767b9e2a47feaa014d8ee7358f1cc79393781fad01d520489486323f6544b23412538b74b2f17cd1edeacfb790250c4ce3653465a5fea510aa6cc6065a72973a03ffda19175efb2e9c9754e4c4152c847de3859100c1b860388a25449bcab2f6064d64d77d417a191a998e71df1c895abb991003bfac40ea654d7bde20915f06505bf3f67ed1754d0fef5195285ff6c3141dd60cdae3f7ea563f01e48e3bbae5386395ec21bd487576f63a41bfbb74e5a6f4b7b94fd4c62df1be81852df2b4438acb537564fe0c2c2f7c7d5386c0cfe4c03b0d71feb28bd445f2408ae0d5ea3e0d1b52492d9724731bc80d9ae4c209d1fcb446c055aad8e3b092af5a8bdf4713f881be5e4cb773f8e60ac4065b72f5fdb20f40613d146c509f4e1a0ca548d8974df026a367c1b1cfdcf17c747f1983d39d72dd5e74113063f9fc88b39a170e3a7ad991d17d3af0f3bcbf8881ae6036abfccc11a47adbd052d3b33e62b2189a047ed29290a3aaab6ed8b8d4ce72be2e23ce326da8f153cf2e908ad8c74c6859ecae45fd70c5a55245152330e124257a9e83db2656e75482676e4e7c452a9cfaeb0204faacfdfa5a443df498a999caf99f966ba95c89490edb8d0de655c5d86b18e17a13fca46adb5efd46c8f32573e9c64bf5a63be049bb47d813a12882b3791626bde94f2c4fe35a94290a6c431ff73bbfc7da28c185e9b246c948204631298f1df5dc69999f4eb5eea7e7ed54847754c038360b7d53a3a8d270d39ceb31a1c38363bd67476a0b8617d2335a7dd3169bbb9e33c6f0979ab7764165d5e0746920cf8992a7b59b35daeb5699b900d8a99e53c30c7cfa21bf9b342541843dbc65ad178af6599314ed1dd1caf8bd7f79ac2d7c9e7fa465d3f33ff50ae84a0324e2408749a720aa7e25ad09503268ec48a54d41d2bba37f7ac5fcb1db299b53cb6f7e8e5de44da5e2831f0eb323306a571168de9795fb7ea66a82ce533924645cc10fecfb4326adf36219750b8fb5625f3316a1f17dd3a8e55540ac7914e994747a3a224fec250d5596bb3729b8d98879768d340ccab423142a4989a61d88a80df52faf55a40be61a0b60b8811b07dbbb16c083d5af2c3e6fbd4064603d15d008d7f22023ad9af9897fc3254fd46a6dbb1671fe90e5bc29d34e4178586d1430581113b70dd7515e151aa68f83ec4aa7ea4665e51659e8529e7ef67d8aa1158847eca220022149247e2a9596082bad0723ba17bc67fc237dff657c6bfbd"}) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) 07:28:19 executing program 3: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003a000511d25a80698c63940d0124fc602f6e35400c0002000200000037153e370400018006001d00d1bd", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x2, 0x1, 0x9, 0xf9, 0x0, 0x1, 0x48088, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000600), 0x9}, 0x10, 0x200, 0x1f, 0x2, 0x9, 0x80, 0x100, 0x0, 0x6, 0x0, 0x64}, 0x0, 0x3, r0, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000001780)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001700)=[{&(0x7f00000001c0)="bb41297ed76fd610d8083c8aaa66e5ca70fdda8ab77a21aac56766b91397e22ce1ddf4286b40007812290cd364f64c7e3faaa1981b38031bf25e93b8d4e7fc00431f547ff92bc6105fd3142239ca9c37051b58bd8bce179d5dae60edee0572172ac183914eb6da224616cd8f0172a82891b668c630564a6eb1bab83d7ec707e2331fe5894d62ad1b006010a57cd3f49081139d13325c470945967447180af78665b246c5d8179c5a190fbc0cfc2c1b65971ac5b6f606162e36e494bc40502bdb4ea03cf70f870c7d965924b80b19bdd0", 0xd0}, {&(0x7f00000002c0)="f782f97696208a67159e0d3093cfe68001ab94fdbdae63448264484eedc4b76ffae23122ce6b42cb484a455178591fa324e39634b6ad1c5185d0238da9b814c093385c9653a4ae53b1e72db7ff32d6ceef888569b5881a8d21cc430fcda833de206242704ca58ef6f05bf515e048dfe2a863ae616dc9", 0x76}, {&(0x7f0000000340)="6d001a1f2c739a72b88ec32b255ae55084921c8ededbe01b6978ec4e625505278948090c0dd2b811abc972e7cf65aa9737ba8ddc8a033369ba010ac8ec745d9c9d05821331d40fb2900e191072a0f265e004e0d8e54eb74fb04a076b032086", 0x5f}, {&(0x7f0000000100)="7d8a7c59492bd16520053557fdc195875372cdfd13619966", 0x18}, {&(0x7f0000000500)="df4a66954af4ffecc7f9de56878f6ff6b636d7f5f38f89990ff6bbc43a7440fc051ea19f1d78976b55321fa06f7643eecd987b0b8634511af293c039c48866d626e5c37f311354b33c9585689ec8d6a9bae8ef61ac2ac2e7caf4041ae65dd9a1177d34ba72e4412165081c490034463571e3ddb28d1c2f4ff7a76dc1b84ea871c15dea6ebda983e5c5d22eda10fd13e4e93ca03b23d0d66055f272e18f9e9c3461e48fb76a5c8c8bb86597968a22b2b5c90e19be6b75ebe902fa2352ab428411dc390f8e8438cc872c9c4fa2be1cfd26802d31839906c533855308de571e79e486c32b2f7d3ce6f33e0b421ec7e7641a630e74f26a30a84c00", 0xf9}, {&(0x7f00000017c0)="ac88661b03e6fe333db0e52835c344b7e4d48008b21dc82d9d2c271fd250464003a290d0075cb2aaea84119d362229170b44bad6704d36ab96a4de4ab21b0a373cca8f52abd994a726ebcb6be0a98ac650f3be4a6be22513ab0c62f5ef34a40c751b5e2fce73f3091f7cae285dc276fd907c7e63092c1c42ea06b428a167b3b047bee2a97af44825007be0e6bff28a9fe386baea3d09a730bf3602a389eab6c50fc7ab30366f0cc3c8cc88eb21e92ace78e3424b8813ccbd6e698e625aa8ee1dff3fabcc43ebda5cce391d1ec8225d66c2f8e71307cc9405a36581ab69d500fd032c", 0xe2}, {&(0x7f0000000700)="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", 0x1000}], 0x7, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfa}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x30}, 0x1) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000030000001c0012000c000100627269646765"], 0x3c}}, 0x0) [ 548.005459][T21638] ubi0: background thread "ubi_bgt0d" started, PID 21638 [ 548.013922][T21628] ubi0: detaching mtd0 [ 548.036526][T21628] ubi0: mtd0 is detached [ 548.071951][T21620] ubi0: attaching mtd0 [ 548.082943][T21620] ubi0: scanning is finished [ 548.121962][T21657] netlink: 179388 bytes leftover after parsing attributes in process `syz-executor.1'. [ 548.196092][T21665] bridge0: port 3(macsec0) entered blocking state [ 548.225733][T21666] openvswitch: netlink: Either Ethernet header or EtherType is required. 07:28:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x200018ad) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 548.244581][T21665] bridge0: port 3(macsec0) entered disabled state [ 548.265223][T21620] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 548.367763][T21676] ubi0: attaching mtd0 [ 548.374108][T21676] ubi0: scanning is finished [ 548.392221][T21665] device macsec0 entered promiscuous mode [ 548.452377][T21676] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 548.461103][T21676] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 548.468803][T21676] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 548.476104][T21676] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 548.483979][T21676] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 548.491170][T21676] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 548.495048][T21665] bridge0: port 3(macsec0) entered blocking state [ 548.506701][T21665] bridge0: port 3(macsec0) entered forwarding state [ 548.509962][T21676] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 548.573008][T21676] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 548.647404][T21679] ubi0: background thread "ubi_bgt0d" started, PID 21679 [ 548.656117][T21677] ubi0: detaching mtd0 [ 548.668280][T21677] ubi0: mtd0 is detached [ 548.697139][T21676] ubi0: attaching mtd0 [ 548.771099][T21676] ubi0: scanning is finished [ 548.875722][T21666] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:28:20 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) write$binfmt_script(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="d258ab38b7705a35d285526ea907629d75850c65a5c5991341f19ff5a032b500a5635840411d6b734ce62fe90edc095efe40b7613e43947de971ea06f582fe1c0a86ef6d4d31c8c0c718270bcc309ea341bf11ea87a49685db3ad78c82757d61d3aed541b9294d736da3563210f437930c9f8e532f66daba9b9abd13c6cfb8e738ea791e4965877d9d929134c2ef585da92dd46606bc82c7021f0bedb2b1d517a75ed05627468ac0d31da88417be064d4b1656fdbc954061fc9e0d2c5d3d44632e20", 0xc2}, {&(0x7f0000000140)="aaacd7801cbc69002669e5c818d4c177efa62610be3e296d16c16e79f8bb01682c093d99e87b2bb198b9abba89fe3d4cfaa043017814f3ab9cc29fe726e49034dcf5a24cc839354ba65d04936ff478a63a7d928021c1191f0bff5e9bdc9e2a6509c153895cfa8ceea6fabd69b37e2652f2198614aad3bc4e418de354ded311282159a7972bf2c90a9de74ebb78ec5bd206ebcb038c54a00691e9a937f50c79f9308ac567bfb041b08217e33e6135dad77dc13ceecc097f714d4b92a9c7aca67ca5efdefbe0cb58c3c06a6d", 0xcb}, {&(0x7f0000000240)="d05fccc098b3aea87a649d77d65f0ce56c27927dd8e17d7f2492b6a5e4508aab6a5f2fcc688fcb8bd28db5ec880c9ff85a949b828cf5d66b6ea8cbd5d9ce5790d40b36a40f56c71076168ec048f74b6140ad3660b1f477dcea8a4ae8f0efbabb693c2fbbeded77c027a5c5562426fff90ee96665b2067c649f398c59b09a0bbb4fa3ab83eb2ab205cda4a844df3ba949", 0x90}, {&(0x7f0000000300)="9d41f897fc80ab302932fd67e2bb8de74c665ada45c2db94c92c0031cc0648a151b2a3dcfa689db378b37394d25771b101a2a9dd856d819e5fbaa767b1a4cc2c3cbd5056fbfea8682f5f2e445ab13e9243cbb707b451746682bd4797a177f743f00e231db6175c7aab4ad36028ebe91022d84fe5e7c0dac1dd74f3dc47de01288c88b1dab975aa0340b89571f66d10be175812b80a01991017799326cc6493aca3390ce5fd9cc7c449f8279bf227c16e551d27b2ea323e61b20ec34776da3a93b441a1e8fbd2656feb6976cbb267fc30fd62d000648f9b60628f4fc010e2b0c6f08f0b96fcd8e6ac13a23b7dfcb6a329", 0xf0}], 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@newtfilter={0x2c, 0x2c, 0x800, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x8}, {0xd, 0xc}, {0xf, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040040}, 0x10) [ 549.027885][T21694] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 549.049308][T21664] netlink: 179388 bytes leftover after parsing attributes in process `syz-executor.1'. [ 549.192077][T21676] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:28:20 executing program 3: munlockall() unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) r1 = openat$incfs(r0, 0x0, 0x280800, 0x66) mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x5d8a4000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/power/pm_print_times', 0x400000, 0x34) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20010000) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000280)=0xe, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000300), 0x6e, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/42, 0x2a}, {0x0}, {&(0x7f0000001500)=""/7, 0x7}], 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000001000"/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c00000000000000010000d43be6d721", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xb8}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000016c0)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x32a, 0x20}, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x284000, 0x0) sendmsg$nl_route(r0, &(0x7f0000001640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@RTM_GETNSID={0x3c, 0x5a, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_FD={0x8, 0x3, r0}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x42) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440), &(0x7f0000000480)=0x4) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1b, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000500)={0x0, 0x0, "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", "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"}) 07:28:20 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x400000, 0x7}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0x8e, 0xc1, 0x3f, 0x0, 0x32, 0xc006, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp, 0x10200, 0xeeb, 0x5f7, 0x7, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x7}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x8000000803, 0x0) r1 = socket(0x1, 0x803, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$incfs(r6, &(0x7f0000000240)='.log\x00', 0x20600, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_delvlan={0x18, 0x71, 0x0, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r5}}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x80, 0x10, 0x601, 0x73b81, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x242b8}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0xae}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x6b}, @IFLA_BR_STP_STATE={0x8}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1e}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x2}, @IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x80}}, 0x20000000) 07:28:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x200018ae) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 549.719816][T21722] ubi0: attaching mtd0 [ 549.748015][T21722] ubi0: scanning is finished [ 549.801001][T21713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 550.014463][T21722] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 550.043312][T21722] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 550.054292][T21721] team0: Port device bridge1 added [ 550.070451][T21722] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 550.091236][T21722] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 550.109615][T21722] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 550.135224][T21722] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 550.167016][T21722] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 550.218177][T21722] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 550.276045][T21724] ubi0: detaching mtd0 [ 550.313916][T21724] ubi0: mtd0 is detached 07:28:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x86, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff006}], 0x5, 0xff01, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000ffffffff000000002c0008801c00010000000000ffffffff0000000000000000fbff0000030000000a000200"], 0x74}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, 0x0, 0x0) syz_mount_image$adfs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x2498, 0x9, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)="3b187b1e4a86c6911100a4a103c0ff9e8c1ae8c02f1d630ca6c8aa3dbe254425e96beee1d5cb09faab5e9dc4d26f2671b4c7cd02db1869d362c70f83d8ebf9f4a21dd1936783d28c9f9f6e974306ed9e0c13ed9cc0f3ac444cc4aca70faa25f7426be7e7ccf52bf223a51cf13581eff3a2961d61effc29fac024e657e88a8187650988b84052fcc397cacfd3b7312e7a22736f6798be461fbcb8c9ee9095770ad9dd05565cd893ad22af7ea75f944e3551871b4476926f912e3e3df11a9bb569aeb642", 0xc3}, {&(0x7f0000000340)="2fa977f757bc2a949eecf3f0b8a4c38b899ce19990a237e0c276b7708b22170e4d27dbe4e0a22d563928df0da875c4a631f83340c1bb76e971508716a5d20468797ed40bb506aa863f2034fda828f67446c0", 0x52, 0x10001}, {&(0x7f0000000bc0)="2d807e3c749acd60aa25cf361ea22208cba315f82db154144db52a5b3714600085817af8ba8daa290a5918338090c6c8d71e709e4483444094f6d7ff178464dded677e2b651b3f09d390d6afe9f6db9672f7e2781ebd5934ab78278eef29f9877a789c5090b4a02e4f4d4be2e74e3652c596b6a6d010e7a4c1de3ef85f7e74e0f55f3f3da1acd80740413ba3", 0x8c}, {&(0x7f0000000c80)="f8c97492e2266a2f58918ec17c7d546223ee88f8c0690cf6a87c35fbe9899649448afc532afaa7e784e555cfb83ed8de73359152dbbf5179686cc8cb36f37288be92ed853d5d1d7244d99decd93f286b103bd87db9d35a265d85613152", 0x5d, 0xf}, {&(0x7f0000000d00)="7ca40d6ce090c5c5e95a4394e96e4e0d2ffe95c53cd6be71a8845d4478d587c25115444365abe2132556c0de1c12e9e0a2b605565a3836d1447ca8c391d2cb92cd9431ae9edb4d8e68307143e58705403382f2e7d8b48240f90d46d6a2da644ef87a419dcacba6a06da24115e390c95b1c2def5cf20412f04eda6460148c8b2844ef68b37bb6ba25513655156753ed9260eb51e6fc3f678d39ab03e949bb832d3783a78b0e7361bfe5da0214bba914d1190cc576f37dbda57715870945708342f071003035754de64c2d13145eb4", 0xce, 0x200000000000}, {&(0x7f0000000e00)="95963c2421e852ca2b566dc225a3caa194383d394d1a8c936ffa5f1d147e48d157a94d2df2196f3c09dc9f90c6c4c0cec379da2cfde2108aa738ab58d4817e6aade5cc30ca08deaf66df583bf3474a93c092ab6c54b967657e6b7d6b44", 0x5d, 0x3}, {&(0x7f0000001600)="4f52aa9c189f76a7e14edba449e4224165dd8199781b71cfd3d9f6b75fa5b703546da00064c6cecc64e102bf3582e0a40384891e2f98e4bfd2964ab565d0f269f7dd7e86786404bdf28a936b4694f10a3d96e440776ff97a448dd995f07ad959a8e8e4695f03d64ad92ccf0c65101f28538f1303e66c9d66a5e659a15df8bf6df0558df9a7fcee707bf83541c7a53ba974c0d08dd3594f66873be49cf3fe24fb037564976d29d9682de3ec3d9b3642152b62298d6e52fdda56185a27995eaccf1c7384bbeb0188219a91d2abf4453145ee5c2565e486119a7a505b09124e762e56f78af80e8c8d7b1112595cdee3771f0b8a595817d3a72372e7b9d351528031aab1d6daa957096a4484e2f69925d4709023add0f99e00a7f9986c024fcc6a0dfa345a25a6e4fc019499c350faf38e2551619d9f962902a48bd68a871d7afbb52bc6d69e6272fd90a2e6bca07544ec0452d780348bcebe3cf3c4cf10130a26c3d6d0637971260ed5c8d2f50906335f605fe91b675c47db8acc1a25dc523bb3f98da1878d458437690d4553fbe272db50364b71bae803eef3826c4610a628bac7359c05bff587d40520ac8d1af2086577e995d64fe9542519d0ba1c9841847ffe98599aac35f960703c16fd342aad1956e4ee8c918162f506de4008e732fe8ba2c8304d966514bb87e7609d891d27ac2ab4b06c545302d87b080f6feef21b0799075e5584af8596cdc73c884e0b8e8ccd4b364446d409751ee88c5539a0e652c789005fb7ad982fc76cb967307c2af868ef0abe015d523dd08312037035c624592d3011047eef64f6ebd5694a1ac8e64f6f932b540ae0de42492d70a69d681a3c57fc7398d30275a08acf6819f4354b8ba15769db95e3f5e1aebe8954afbe36b4ceffea7f2d2a133f6ccfd95b5f33dfb67e16bfb72629440aff58fbb9ccd5dcd32eb4d1ea1fedc0e17e16d78ca59732f75e19dd7d2eef021892f9427d94cc620e60cdff3553c09eff459fc681a860add28dab5c8119d360055695b75b2ce91b09ab71e7338d70d270fe1481d08d6da8ff6398bd21efb47b43c2ccfd90874122b0a01847da7e2c6b055ef54c0a25353033fb31ecc3d6ac5fede5216422adb85ea841cff230475d2a10afbb374a7ed22c4024ae65443ebe32a917c7c37a7ef2594f607a02cd8debcd4ee2dc6ee254ade630e4868929d72612d7dda5a8bb9d9af99101456ed5ac144a22c62b2409cc72d8ab5f05cd6d36d4aa6f39f7d2b7e55f4346c0fb7c10bf92e48a7a710e84483de388166c9f80a930ce9f15f656f7d55be90b7c54b5222924bae7f0bbf970fdb8d92eaaaee85db8dd29b4a54d26eb97cb5b08c8c1934fa43dc4caeb880348b0f42dc1f77c345b7d2e4a6a196a7c19bd5b5a3b741539a105503c6e4baa919ace083a52551d2cd0377b6455dc452528f84835dd9c6858b3a9c4b99cef4fe6ef99edb90b457668312ea3463bc07b8d8e8fa534c88c96dd21bd361d9c03e3558ed0c70f4297cd6174933c640950b8a36a480a74f4707145cb59f9461a0ab551e0a12b1c0dffcdce56d06666d55d52cb61fd5b46ee8e390b38ae6df3d91466f4b44a296845c8468b43de223232af1c64c4f01e3962abbfbc7a05659c1628a0274ee2dec832517ffcd962fd62689d7ee2444b6c9711b927701d6f0e26ba747f4170c0bcaa589ea7a9c00207660314606296d918f5312b1e46bc5f2e7eb4830d661a21e357fc5f319d29329a1e728875ddb206e7a8fbc1e1fc6286916db63af3c6db4c9d12d85234cd60cb495a3bc646635d6faadb680627084bbdf75ce26bb4d2cabf2b3f93f779e686a2abdd4c9631cc7bbcfbfb19d945acbbf1cda28bda86fd35ee3d77c174e917f7f41d3c7331ba3e8178ebd1bbb47e01eee465ad631dd28931d8f00ad88d2e933580d43c09e60745d922c3dbbc2547a84c833b6bc5cbaa5df1972e8e421f7afce1e40e5ad8fa7888a16da9d2a915bb77d3a00932e2ede766e3961c5f5d101103fb39380fb4deec1aa5403b2d28ad544c89c42f4b45440b6036f1319c7b984251474482e503601d3ade0bb94eac9e0c7c55d44d2a2c2f386a2e08b1c35536f98c7c91099db7ac55c54c7a642917f7dc415dbb172498e397f925f0ea6fbf686062a592553083ad90ea9b3636a88e2c0756f68486304bf7bfb7601649d88616ef84c029e7ab012f91a069961a3407558ac98ac36676c9d4997a7d6fe9bdf3950da029e93b38bbf657a0ba914878ecd7ae8b1c47308b881dc2550c8ab23d26d9e04f396949ba8aa842fa82790dcea640e5e13cfa3a712c58cdf7dfc6dbcf20328d78d7f0c9762b415838ec96cbf61bd8fd9cb91802aa5ebb4f0758687ceb6977762f0a0f0412829b9151aeee0a11d0cf56dd5cf4805319692fcdbbd05c482df67baa1def2b05a998106d5e91381f2bb5a37affb5375bf96954d1850873ff16f22a4f5b77077fda4894fd5b4d42136f14f37492e22d1fc657d3a4a72a42977a96f3b5a45a1e7fc116c6db459288fb29e7d87ed1b3b90fa403ef01aa58e18e4636d6c859feea8a45ac5a5690790c7a04a55cace4efa79b2f0f96acc24ced169339f2b4fb24e2d9ff3eb14c816418e57ed4916f27bb57f272afbc32ed57a321ca20a40e5766a16c52cf8120c4b7661b444ee12b0d30c62b263e7a0db9adb9a1c520276c84e7d786075e2548b3dbc2f4a865df486aa4935451b23e8e272a0e8d6b04eff491d75576dc19fad1804339379fe879641470bc68305425c22a9ff8e39efe628c5d3131893920af08ef7fac196e749ec82d585bf1d054f501048c207a3fa6b1845f0e10105672f2f53e2eda1d14d169fdf064aaea6dc1af789377ada0248018efadcaf1e1feb27279e4e2586a44cee37d7ad3a663c4cd77fccd762f04946b381fc25499bc70c13ecd0d64a68d2c53b32b9da62817b97e16895f423c61b1fd31d93ded8d5f4785d4e2262775050e707b4f6f13497abd9638d73d6cd4d74dde3636027cebdaa0039958692300324ed2779b93dd96ed641286e2360d90ec3134d3a254f4dcc85ab7dfe3a3d4e2c1f650e9b130eb5ea15aa1d8a3b89d98b589b5060931a6dc4f4aa853f92070a3fa65198f0c3bc263dd939f6e075b338160107f37b2ce5d2a4610734ea73b376d9e2383e09f8698a35ee107188ecfca4ecc4bfced76b8f6cf8732298de297d0833b533c426b9c61b86ecca67a4a5dbb1a44948a01730df5772c86fe135d669e897d707b5d75e32e1d0a4a2e802d4a412b8561c078006da6d94ffcd53bd58e05965ab937e638d5f9b09226c493c3d68163bc7f57a30ea3a42603604e7b72d6a256ac75a571c3bb6b0d53b61b297b0c68bef09b01251faa8d920a9183727d69c568febf255c08eabb8c90dd8f0444b04bb24668249ad09a7d67dc99bf68175b428894928ee0b791fc8f0cd7f064a12f91eb75fae804e5d612c45de00cee5a07d082168a1b252dc488984efe06db4050c3926d1a0a28e672dd2eb5ad15bf32bec14ec6aef2ab44e3958851858a810855f4d832bf4bf064875e1eaabc074fcc6991bff6322b44571a4b4a213a70b8b40ca65dee404230d343f1d79587c677fa8e97f3ba2c0eef15e3c95da881abc03dfd5e81277cd307bba615b7572bfa366facf65a99f90088a559c897aaa3f1d63f62ae80d6006bbb4546e509060518bad1f2b19e778ee95494734d8f94c40fc60eea84427b2c8e941f8ead4c0b0629950d5e65d303be7f7fa0f350f156d8097f3ff498c9fc69f7451e5c8378fc521b5d12a856d9df9a1b503777c394215ab048c75a98a43a92c4681ea41e5bd791acd38bc9a596f9e6763873f81f8d82f318e32bc6dca8cff5c05128aab0633951975e456350f5e04092a5bbc408ca93c733f7f6404fae80fa81940039bf5de309656e24dd37b5cf83a9fd204fe5ff794c94aa0769014749ac393476fdf69a95ca8d69d825b0a0c208d04e6c95a6cf6b34f5ced32d0ff7043a64c0be730e106d1bd053fc756afda5ab5c728e534a73995e4488063afac3a695e676409b2950c9d430d36e10e5ead31243d658a7ff53d6ac7f63188d0cf533028f5d6289eb7a1592d86c2dad7302b3f68a03784dacb797398656df4f89ea35c3377fec46cd9fed2b13de0d448bf382334f2f1a180c169fc1e6df33930c1359363e2af4dc9dc6f570d6221f6ab0441ae004882489b27212f3ba27e0f3889532fb0c96e2018b2a1f0565964cf02eda67f552c93ce3364141c956dc0f9015975e05da623f392ce56452304b5239c9e4400edb3825fdc9cc35d46d079eb5c8adb0b8878ed3321442df853beeb2d8eb18d164d267f8ff9645989ca5cdba9cb71dbbcc31b7c14ac45b7c80f4288c957cd6a5f6e5a9a353fc6096f89cd8a9f04e9dbdf09bc1f9ec72f52fa0ae10f297f9f1f6d1da3e908ce64a8a398ce5e0146dd42a164317194a7f94db9c247af1af80c62241f2a4402be793fbc153166a8c2e9a7e86fe46aa8e0504e39170f603d6a923e4354cddd9b5de7742df025340bcc561f4edef9576ff22131cb87bb8d1e43184a1428bd29d416c318a0437e50ca3ac2c71a8742416d1d6bd793b88c88545c78b54b17aac8932f2e2032885a58be5ba2b445e3a7126bf5c32945d266884666af432795512da02ce4d3f149bf8a6eadd04760576f9dd4459a05de1a7f8d0434bc29326f0fb87f3c09636f86966b58f80bb0e92b6fa11a863cf9730faeb310b91985d4d72ec7bca155823b078ea69dc44fcd0278ae6e263b1df69fb67c1b6e0a61d2066edbc10deeceb41c44bb67af4df439d3005513b87267b1418a3650b90b530ddfb65b0acbf19eac9d16bf8a701a784008702b0184f3c55afcb144f8bd48ad346dbf88c99f4029e62271a7630fe9a4fb9cbac8c780206a74b73b3716326a6987438c4473c7553f8c09b1b9445ddda6587319fed5c88bc82c4637164927fa65f22fbabed72c3896df7009268170f30fc4f8b3167f356d2e00e170693ea16d93c5e938e548a32d6fbf47a3c5afc917ac32b71a349ef78c9c3be1637ba62562ff8e47b8d9a838fb66b93180987ec58d97ebd9fbcd3fc131edf9c9b8fb657e46ae8b0605bf2de47eaa499ee0c0a7c47a3f09d38b0b226a7af79ab53fccb2433c0850aac5fafe3ab2fe6b4d70205777f8e56d5a7f5c1ef2520cc717cb3fe8e650cb0a76f97fe51d1cdbf17bae65d01c3ae70fd0eb226fa711b966bbdfaf88d23d74c7ae630a60414afd24d4ba4bd40d97247c4e19df2790be9323e11380c0e2aef912194093d195f4d90e1d8589486d1fad1afb74fde91bb0a2e95e4150d43c5a4fca679d5e019431cb7431779dbf1c01a24e62142567b77c76cff68f6963ec13314329c680a1cd1ce15bf106a4750af77ce2a4d280454ac46f2b46f320d3f2e161b05b644418b5ca954c7f5fb445e0f83a0a0599fa46c594d30a71ce18fcdb4e42d2f384c4605eff5220721411a9c110fae46ead282b23a7a7e01c0579170e63cd569f34b8ab5f4f5ef8e464ca2b50137368a81a63cf43c4c8dc85bcfd249c241227dc6a27db5afbb56c5dae3688d0f211a435e69a9a7b4a164ef12a61769935b0cbd6ffb2df00fc93f46e4a864d4d11fa87404cc1209b5f419cdb50d5a9ee7f792adb19daed066f72bf68ac7b201ed6d8dc126e544c43fda62a8843d64253b02d8cc1467fc9eaba6d30000ddbd0fea49a484a829ee305598cb82576704b07b946000deaddb4a7e152a9419df2694d910ece0de29e10c227919887382ce6df648eb06ef", 0x1000, 0xfffffffeffffffff}, {&(0x7f0000000e80)="eb19939d4da5a3a0ca47de6eb7395a8dc4046ea59b4c461267f5c744303a84f89efdb134b9609f409dd8cf03390eb52b31754e6d42d53f5cb488366ef93d1a5322eaa967470d3c3b027eb7b305c501aef9e4f91bb2171c29cbaba8dfa5d1e3bc2b2341ffc23a999f90d38f58f254913b4df7f7d17b9f5147", 0x78, 0x4cef}, {&(0x7f0000000f00)="f9456d2221d49f88759343afcc9794562a54d3b4afbe399ca8f0d0ba84da2d3dcd3aa3738dd3f13269a8aa8856180d9e15fc5924361692fef21c8ee23e27d3abffe67e3b626eba411291faf86be1e637c48ab44e2d02e027e6172715a8de22c358429dd127e734b0543bcc26ed51846a3281e91b424159b35af2e10708a068c8f7a356", 0x83, 0x579}], 0x1004400, &(0x7f00000010c0)={[{'$'}, {'dots'}, {'smackfsfloor'}, {'.@&'}, {'\xd0{\xed'}, {'&#'}], [{@obj_role}]}) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) fstat(r2, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x5, &(0x7f00000002c0)=[{&(0x7f0000000440)="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", 0x680, 0x6}, {&(0x7f00000000c0)="10331befa059c49391e278", 0xb}, {&(0x7f0000000100), 0x0, 0xfff}, {&(0x7f0000000180)="23d45271decdfdcb081ebf30946b8869856e5e30d3520036f08c34ae0215d41a540ed12e488599e2d6eed602599bb6a32c46ac841fb0b82652fc290a9a94dfffd9e210974cc5d3aa28318824ce50ec7ab45fa48c3d9cc153acca3204d2b2c8eb3445b8ba20347c02d9c83fc292d554b42de608bfa85246d8969b580db79ac0fedf40565acae253c46d56742f8632b10be30fb5b5bd260b8c43a8", 0x9a}, {&(0x7f0000000280)="6bb9385a938d991522d3fd", 0xb}], 0x200000, &(0x7f0000001440)={[{@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x2}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/snd/seq\x00'}}, {@euid_eq}]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f00000003c0)) [ 550.343577][T21722] ubi0: attaching mtd0 [ 550.375607][T21722] ubi0: scanning is finished [ 550.545538][T21722] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 550.758184][T21717] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 550.779619][T21784] loop2: detected capacity change from 0 to 264192 [ 550.828096][T21784] ADFS-fs (loop2): unrecognised mount option "$" or missing value 07:28:22 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) write$binfmt_script(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom(0xffffffffffffffff, &(0x7f0000000800)=""/6, 0x6, 0x2140, &(0x7f0000000840)=@l2={0x1f, 0x7fff, @none, 0xfffc}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000003d0012000900e7ff76657468"], 0x48}}, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000640001521dad936733e9e58e2c520000ff00"/31, @ANYRES32=r2, @ANYBLOB="f3ff000000000000000000000b000100666c6f77657200001c00020018005480140002800800010001000000080001006b2b0000"], 0x4c}}, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000025c0), 0x3, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000100)="4c15924a87715aa727719a4ac123a5501466f902f68409137479d91c6a62ff7e02db05fdfb8b9af409ca317d05540a823816efb80518a471772d1869a17e426dc0ef5b2941dc0fea059df7d0c42f456d4597a5eada623f805763c96675e00fee6126728a293f56de837bc7a4dc128076cd2bd9", 0x73}], 0x1, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}], 0x80}}, {{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000000340)="5e21022da3f540bbad1e55698f91a5ca939b92cff49b45b6955bee66abc088904ff962e33b21eec548b8907f250e5dbf485048f670e4239dd080c238190c4369662431ff20f3f78c00295e4fe37de955180813d723062fd90c21971e2083e0df75126cbdb017598102f6f8d0502f3bd4d5ca49dfa603682cbf9e4f477258357afa5d96d7665e00e7b81a94bf09c8523a4ffd4b62c93c46d68e679d1920096dd89e2ee85173bec9869833af70bda2b5", 0xaf}, {&(0x7f0000000400)="b48a35b069", 0x5}, {&(0x7f00000024c0)="049d6dbbff82e74262735fa96220d66e3fcf83a80052ed80c1966a7a72c23db6a1377d36a50d05dba3f8dc04", 0x2c}, {&(0x7f0000002500)="66dc25e86ac75737427caee788884b288fd6d5c09cecadafb439f22672e69fc023ace69e0b146e901977680b0acf9d78673b6b5904320f6ff9a511a980b89c508891c4e132318592e583ba8933bd", 0x4e}], 0x4, &(0x7f0000002600)=[@rights={{0x18, 0x1, 0x1, [r7, r0]}}], 0x18, 0x830}}, {{&(0x7f0000002640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002740)=[{&(0x7f00000026c0)="e32271c022b26519447f6e86ce87b9cd961b359c771a43e77299784326be466283cfd6fb39ffaf46ae00cd72b8719b85f8b91deed8bd7152dc51e503fffa9b77e598f09fcbaca9e28efe1cb0866a5c38ccc80fcc5ca3769407371bbf6e9b482520e5c4c93af44fa1dd", 0x69}], 0x1}}], 0x3, 0x20008881) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0xa0440) 07:28:22 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20001f00) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:22 executing program 3: syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x72, 0x19, 0xb, 0x8, 0xb48, 0x3011, 0x1401, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x19, 0x42, 0x95}}]}}]}}, 0x0) 07:28:22 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000729000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000278000/0x8000)=nil, 0x8000, 0x0, 0x30, r0, 0x7905a000) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet(0x2b, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket$inet_mptcp(0x2, 0x1, 0x106) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/246, 0xf6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 07:28:22 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x10001) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r2, 0x6, 0x0, 0x0, 0x2, 0x0, {0x0, r3}}, 0x200) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x14, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x2ef}], 0x0, &(0x7f0000010300)) open(0x0, 0x141042, 0x0) writev(r1, &(0x7f0000001940)=[{&(0x7f0000001800)='h', 0x1}, {&(0x7f0000001840)="15c074f7cc63928962dec7aeac0ae2e9e97dc8d5860acc4acbae295fcdd9eff892ed5a23e07c", 0x26}], 0x2) 07:28:22 executing program 5: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xffffffffffffffe9, 0x0, 0x0, 0x5, 0x4000000000, 0x4, 0x7fff, 0x2, 0x72, 0x8, 0x8f64, 0x1, 0x0, 0x0, 0xe7d]}) prctl$PR_PAC_RESET_KEYS(0x36, 0x10) r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x80, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8c1b1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = dup(r2) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000040)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x20000010) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e26, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 551.470820][T21819] ubi0: attaching mtd0 [ 551.490372][T21819] ubi0: scanning is finished [ 551.496160][T21818] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:28:23 executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f00000015c0)={&(0x7f0000001380)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0) [ 551.632150][T21835] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 551.660139][T21847] loop2: detected capacity change from 0 to 8 07:28:23 executing program 5: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000040)="580000001400add427323b472545b45602", 0x11}], 0x1) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x130) fcntl$setstatus(r0, 0x4, 0x46002) creat(0x0, 0x0) io_setup(0x1, &(0x7f0000000180)=0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffd, 0x810, r3, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) sendmmsg$unix(r0, &(0x7f000000f000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000033c0), 0x0, 0x0, 0x0, 0x24000054}}, {{0x0, 0x0, 0x0}}], 0x41, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000006d00), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000059c0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005a40)=""/113, 0x71}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000005dc0)=""/14, 0xe}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006300)=[{&(0x7f0000006240)=""/164, 0xa4}], 0x1}, 0x104}, {{&(0x7f0000006340)=@isdn, 0x80, &(0x7f0000006500)=[{&(0x7f00000063c0)=""/92, 0x5c}, {&(0x7f0000006440)=""/78, 0x4e}, {&(0x7f00000064c0)=""/31, 0x1f}], 0x3, &(0x7f0000006540)=""/73, 0x49}, 0x2}], 0x5, 0x0, &(0x7f0000006840)) bind$unix(0xffffffffffffffff, &(0x7f0000000680)=@abs, 0x6e) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) [ 551.723807][T21819] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 551.737133][T21819] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 551.753416][T21819] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 551.767514][ T22] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 551.792000][T21819] ubi0: VID header offset: 64 (aligned 64), data offset: 128 07:28:23 executing program 2: ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x28282) syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup2(r1, r0) [ 551.828883][T21835] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 551.829013][T21819] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 551.894763][T21819] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 551.916977][T21828] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 551.920048][T21819] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 07:28:23 executing program 1: rt_sigqueueinfo(0xffffffffffffffff, 0x2a, &(0x7f0000000000)={0x1f, 0xfffffffa, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xa, {"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", 0x1000}}, 0x1b7) [ 551.944870][ T26] audit: type=1800 audit(1638689303.478:34): pid=21861 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14771 res=0 errno=0 [ 552.033449][T21819] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 552.048462][ T26] audit: type=1800 audit(1638689303.478:35): pid=21861 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14771 res=0 errno=0 07:28:23 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40240, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x14183, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r5, @ANYRES64=r5], 0x48}}, 0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f00000000c0)={r2, r3, 0x8}) write$binfmt_script(r0, 0x0, 0x0) [ 552.106828][T21852] ubi0: background thread "ubi_bgt0d" started, PID 21852 [ 552.106847][T21827] ubi0: detaching mtd0 [ 552.142987][T21827] ubi0: mtd0 is detached [ 552.151383][ T26] audit: type=1800 audit(1638689303.628:36): pid=21878 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14771 res=0 errno=0 [ 552.160810][T21819] ubi0: attaching mtd0 [ 552.208687][ T22] usb 4-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice=14.01 [ 552.223230][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.232076][ T22] usb 4-1: config 0 descriptor?? [ 552.262382][ T26] audit: type=1800 audit(1638689303.638:37): pid=21878 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=14771 res=0 errno=0 [ 552.274810][T21819] ubi0: scanning is finished [ 552.311593][ T22] dw2102: su3000_identify_state [ 552.311611][ T22] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 552.311646][ T22] dw2102: su3000_power_ctrl: 1, initialized 0 [ 552.313710][ T22] dvb-usb: bulk message failed: -22 (2/0) [ 552.402600][ T22] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) 07:28:24 executing program 5: pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newtfilter={0x74, 0x64, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x40, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xb2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8b}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}]}]}]}}]}, 0x74}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001600000225bd7000fddbdf250a088b0014d95e23e3f05e9c1d4d175b7145f1a08c15b38b36bedd75a13951c7362787b119ffda6f8e6caaeee7db31a13d6bbd135e85270d9c00"/89, @ANYRES32=r7, @ANYBLOB="140001000000000000000000000000000000000114000600090000007ea000000900000007000000"], 0x40}, 0x1, 0x0, 0x0, 0x4004000}, 0x4048000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000040)=0x4000000) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0500000020e6b76cd5cd0000", @ANYRES32=0x0, @ANYBLOB="0092000000000000200012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r8, 0x0, 0x4ffe2, 0x0) [ 552.466259][ T22] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) [ 552.529642][ T7881] usb 4-1: USB disconnect, device number 12 [ 552.547935][T21893] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:28:24 executing program 1: socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r0 = fork() syz_open_procfs(r0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x7f, 0x6, 0x5a, 0x0, 0x0, 0x4000000000007, 0x102, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffff0000, 0x26103c92c000d2b0, @perf_config_ext={0x89, 0x3}, 0x10080, 0x1000, 0xe8, 0x4, 0x40, 0x400, 0xff, 0x0, 0x40, 0x0, 0xbfa5}, r0, 0x2, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff31ac267bdd080000000000baa1068ee0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6aa15a52e794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) writev(r2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x400000000000064, 0x1f4) getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) [ 552.756189][T21907] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 552.798346][T21819] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 552.814094][T21899] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 07:28:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20002000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 552.862442][T21907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 552.880317][T21907] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 553.052095][T21941] ubi0: attaching mtd0 [ 553.073725][T21941] ubi0: scanning is finished [ 553.160772][T21941] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 553.171923][T21941] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 553.191057][T21941] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 553.208308][T21941] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 553.226215][T21941] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 553.242564][T21941] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 553.265476][T21941] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 553.291522][T21941] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 553.312299][ T5] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 553.315944][T21945] ubi0: background thread "ubi_bgt0d" started, PID 21945 [ 553.329196][T21943] ubi0: detaching mtd0 [ 553.347101][T21943] ubi0: mtd0 is detached [ 553.382992][T21941] ubi0: attaching mtd0 [ 553.391207][T21941] ubi0: scanning is finished [ 553.463820][T21941] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 553.678815][ T5] usb 4-1: New USB device found, idVendor=0b48, idProduct=3011, bcdDevice=14.01 [ 553.687896][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.760953][ T5] usb 4-1: config 0 descriptor?? [ 553.822075][ T5] dw2102: su3000_identify_state [ 553.832941][ T5] dvb-usb: found a 'TechnoTrend TT-connect S2-4600' in warm state. [ 553.855303][ T5] dw2102: su3000_power_ctrl: 1, initialized 0 [ 553.866220][ T5] dvb-usb: bulk message failed: -22 (2/0) [ 553.893211][ T5] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 553.945908][ T5] dvb-usb: TechnoTrend TT-connect S2-4600 error while loading driver (-19) 07:28:25 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x6c, 0x0, &(0x7f0000000640)=[@free_buffer, @increfs_done, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x700, 0x0, &(0x7f0000000740)}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x3f, 0x80, 0x7, 0x2, 0x0, 0x8, 0x42, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000140), 0x1}, 0x40000, 0x800, 0x9, 0x5, 0x6, 0x9cc, 0x2, 0x0, 0x8, 0x0, 0x9}, r2, 0x3, 0xffffffffffffffff, 0x5) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '/]\''}, {}], 0xa, "ad25230f68bf3ba8594d96473f242e6df718d1337794f769fb78a989b9901372d16f1d5474e86d4b3f99c4a747d66d3fc7399f921aba61bc89f829f44697db7a6062a79df1136a24b674514870fc2c78d0a1016dfb8d0607f726b1aa6a64487d37d2f8f70be0"}, 0x76) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x6, 0x1, 0x9, 0xff, 0x0, 0x3, 0x10, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80000001, 0xffffffff}, 0x10000, 0xcb, 0x4b, 0x0, 0x4, 0x8, 0x5, 0x0, 0xffffffe0, 0x0, 0x740}, 0x0, 0xa, 0xffffffffffffffff, 0x9) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000340)={0x0, 0x2, 0x1}) syz_emit_ethernet(0x86, &(0x7f0000000780)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x50, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '$\x00@', 0x0, 0x0, 0x0, @mcast2, @loopback, [@dstopts={0x3a, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}}}}}}}, 0x0) 07:28:25 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept4(0xffffffffffffffff, &(0x7f0000000240)=@rc, &(0x7f00000002c0)=0x80, 0x80400) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)}, 0x40) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) getpgrp(0x0) r2 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12, 0x8}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0, 0x0, 0x0, 0x34}}], 0x1, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x70, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r5, 0x8}, &(0x7f0000000140)=0x8) 07:28:25 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) setresuid(r1, 0xee00, 0xee00) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000440)) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) syz_mount_image$vxfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8001, 0x8, &(0x7f00000005c0)=[{&(0x7f00000000c0)="d74badfb96d51aa05cf41e5c66f64d78291a31fe7be41d3d443360321f509425a155161a81dbf83c998251cde5d170a54d6c0ada28cb9b89a16f9bd01d7a3e7aee43aae9fe22", 0x46, 0x1f}, {&(0x7f0000000140)="ae19562ed8ae384d4d355a544ebc35b674aa7964ffb399869a81b1bf927bc4412face636910c8dcad48f38fc813c3150aa4f554f2992cdcd60c24fd4c2de3abd4dfd3eaaa932e1a11f9fb5", 0x4b, 0x3}, {&(0x7f00000001c0)="e1ccb043e7c96b0b8df6ec2be79e8ac2f582247b0c84d89d6685cccbf21f6d272af27b6a58cba441ed5b1dd61e70adbe1c1a907e839ddf0c52806fc6e19faa413e4d8f621826a81c46897a2b3ab0f5ab06c7b2617238a31ad4b9c6d010bd9f8a60997a14da0da609da0d44185f7b6005dd3b0e7cec45c727ada39734780027a841b9a903aaf5942319f185856ca91ba99dcbbd916625", 0x96, 0x20}, {&(0x7f0000000280)="c77074f1f8e9ce3f9d0513e8e5b62d47a6874e53e30d39b96c3ddfdbc8339115d589d29d253b7c74e04058061a1c518e33285a9fc7a1fb2d5c785f35b97c1c25798b3fcba7eeaa06de9bd549251c4bfd27736ef70c2e278efc120d6f35ab2989863b543f1a7575ac00fa8caacd1603ecf53350726adb5e6680a53b5853b977952ce768870074597e88b6b673f3ed4746e672", 0x92, 0x1}, {&(0x7f0000000340)="81ac1c47c71f7041a7880eb97e014c18755e8f3fc28acaa116278a1c1209157c0f2d14ead4ac431e53cb4d0ae615730e54fc34ddd587cda92545521065e2b75fdd403a2cafe1b26b5b4d222f7129aa303a19957a44cb411c6c30eb9f7f890c53c6710739570e8799dda7aa51a75e2fafbbd027df768c152a7a21cb48ac018ab7dcc8b4fc04935483e429fead96ae8a9946", 0x91, 0xba35}, {&(0x7f0000000480)="c0a740727757ae42f2e44a43dc7ac0de94b0ae464506292169928465689643774b76796bf3c364963940d15c6d1a8edf2514514845e4805a43dfb413037768c2ab07544848e0848aad665a33040bf075df174038b71d95e8247b62787515ca49e8b68437f2a54397969c359c5784ab0e8a99e75670bc6a6a45", 0x79, 0x4}, {&(0x7f0000000400)="583499193ca91e03d6a3567ae5fdf1f5279fff01a7f6cb9facca2e68995f5026a84d9b3fda471ba105007949137d", 0x2e, 0xffff}, {&(0x7f0000000500)="e7ebccfb43e9dfea013bc4a919f71bb83fbc8218d17f855793bbc513867e0022fde45dd63afa50df4e6c7b17f580cc8dc76ad6258f3e542e7152870ecfcf3c431402e1ce6200d16fc6d5435122cdbfd23d55fceab08bf977d79cda98c6f7e400caeb90af07d442a043bb38c0f00953cebce9da06755d51658314518a6251a9f1ac3dc18f253f7b54474b62f42d107975952fcdb252393ff4dca3eb605a62653112bed6c0f9faa6071ed2587775f1343abb", 0xb1}], 0x40, &(0x7f0000000680)={[{'/dev/ppp\x00'}, {'/dev/ppp\x00'}, {'+'}, {'-'}, {}, {'/dev/ppp\x00'}], [{@dont_appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ppp\x00'}}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '/dev/ppp\x00'}}, {@euid_gt={'euid>', r4}}, {@fowner_lt={'fowner<', r1}}, {@seclabel}, {@euid_lt={'euid<', r1}}, {@dont_appraise}]}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$EXT4_IOC_GETSTATE(r5, 0x40046629, &(0x7f0000000780)) write$binfmt_script(r2, 0x0, 0x0) 07:28:25 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r2 = syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/mnt\x00') preadv(r2, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000500)=""/86, 0x56}, {&(0x7f0000000600)=""/54, 0x36}, {0x0}], 0x4, 0x2e86, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b140)={0x1ff, [], 0x0, "71c7bbc6a945ee"}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8a000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0)="f26f0d5c1bcdb974f8a3fc3ea976120d1cdfe962598443f2455f52fbbe52c3689a304c8cafc6132f22ca33ca1076375db6b655256e3f6fbdf33382e5d961ef9c8dfe1d8bec0c2c97a7c08bfd73579c5762d55cf1f64e7a1789c230893525497be7ce97d5eb021fa59a3803155430af6a481794f132b6f6a88466ce193f86233e9067f658ed45d39115e8577f243ddf98d73d495fcbde603abf99de4fcd2f9bbb2f533d0cd7fda245f37473ed3c948c1ce60408662f539bf2e26987876d5e65dbe3747315fd1fe3aae067e69cef2a7f266f29b8599254f8", 0xd7, r1}, 0x68) write(r3, &(0x7f0000001400)="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"/3584, 0xe00) fallocate(r3, 0x11, 0x0, 0xfffc) sendfile(r3, r4, 0x0, 0x11f08) getsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x100) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100000000, 0x8, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x39b, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x1000, 0x8000, 0x1, 0x0, 0x80000001, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) 07:28:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20003f00) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:25 executing program 1: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/77, 0x4d}], 0x1}, 0x2002) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0xa0702, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)="06", 0x1}], 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000180)={0x2, 0x0, 0x4, 0x1, 0xf5, &(0x7f0000000380)="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"}) [ 554.038541][ T5] usb 4-1: USB disconnect, device number 13 07:28:25 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x686080, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='%/\\/-($,/\x00') ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) write$binfmt_script(r0, 0x0, 0x0) [ 554.249169][T21983] ubi0: attaching mtd0 07:28:25 executing program 1: r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x3acc4f93) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x6, &(0x7f0000000000)={0x0, "dbb5147e7506df62573d876a472764dee71bd158d5b0521e4395539b8c1f29239c"}}) 07:28:25 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) clone(0x82001000, &(0x7f0000000200)="c70f43617b63bb965da1399695f01ef8cdc30df3811c7cda9172addd12de9566b3962da3deec102837c7ce521c2412249e7732924a0842a5904339a6eefb61309e4728f278b36ecc47cb37e83604750785994ce1b994690e49b5eaea5ce87ce2aa02fc3a96b3bc55a66975c8854fe122030cea63560a43175258dcad0c83108d09d096c97ea6a1d44cf677811caabaeebfcc5f5e690b1c9901e1e051d7", &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="6c7cfe979012c7ee6bba2e731283ad33e89cd988fa4109e5") vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="cd80", 0x2}], 0x1, 0x0) ptrace$setopts(0x2103, r0, 0x0, 0x55) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16d, 0x16d, 0x2, [@enum={0x0, 0x8, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}, {}, {}, {}]}, @restrict, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x0, [{}, {}, {}, {0x0, 0x0, 0x200000}, {}, {}, {}, {0x0, 0x3}, {}]}, @array, @restrict, @datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{}, {}, {}, {}, {}, {}, {}], 'x'}, @restrict, @volatile={0xa, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x18a}, 0x20) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = gettid() clone(0x1000000, &(0x7f0000000040)="b50526e52b2c3c12e89bc17fdfb51c3adc95fa6f4ce19b12afbbda46b599c179a5f563fd7c17a8cf1b2f4e69f2c3418d", &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180)="2fe54170ae3dc9c97a425a3704a7136243682d091659eff6a3136eaac9fcd8033c699020b979bd43fb110dc7d283d601293fc9ddc255fd79541326549d40cb1385cc0df10018ccc37954cb42822af7135a351673b18a063d1f9d4ab268b09855e19cd72e70a660e5bd9517c0fc8c47b1b6aed72f7c80ffb8d7a1e9") rt_sigqueueinfo(r1, 0xc, &(0x7f00000002c0)) [ 554.284345][T21983] ubi0: scanning is finished 07:28:25 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) r2 = mq_open(&(0x7f0000000040)='@)+,[$]\x00', 0x840, 0x84, &(0x7f00000000c0)={0x1, 0x1000, 0xa6a, 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r4 = fork() sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x3e9, 0x200, 0x70bd2c, 0x25dfdbfe, {0x40, 0x1, 0x2, r4, 0xf8df, 0x8, 0x2, 0x2}, ["", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000080) mq_notify(r2, &(0x7f0000000200)={0x0, 0x41, 0x4, @tid=r3}) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0xf}) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0xff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) perf_event_open(0x0, r0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r5, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x191400, 0x30) ioctl$sock_ifreq(r6, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r7, 0x894a, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 07:28:26 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="61124c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf670000000000005601000000ff07ad6706000002000000070600000ee60000bf2507e947b442d515420000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad300100000000008400000000000000050000000000000095000000000000006e8ad524a56601a5984e4dc87ca658e5f2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46be94c6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db611d2aec070f718ab629b4975320dd7a7da532281fd22c7b8350084452715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa64ae483856a6e494408d0b33047f06b922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f039fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e5fe8acdf2b9a45a38d88a0b47f4559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d55bde2259b616d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101006e36ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1dd511ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffffff7f00000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6ea82b476dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38bf11b9338999d3bcd7e745b5a95d45003d0600e453dc623f3e6b094cba72515562450c59e8f32e36886c8b0ad7438c6631388892c522b18e3ca48e65535b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd07c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe8612247f000f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b329f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f45253aa4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c177b4fa4e2f2123921effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad7d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000225e8e328887bd8b0cf0002f6a066183dafa86133ecc054fd515502e1b3953e50000000000000000000000fbdde0d7e6cbf2595bcf657cf156b3e7ada6978ef51c4367e1bf232262a8d2f2e43e4d102422fe6b53597cdf6625028b3fea9435ba094ee1137426c9050b93bc146fcda5c2fb58a61b6345d5c609bdf55884d052eb9af9c00eb5a6beeec7aebf9d490b8add1d3e444f248246533f09cfb639ccb3b6f5d85274d78a05b46698675942724cb4bc4e7d213476f912467c9bb994c3b2d3f3b1520ade0b9133f6551e1dc54201621dd8fbf85bbe7d7949da0e619085499017440b79bacbff8218d5f817781d5fa1401bd21a1c697ac20cb30523ebf2d2e57d1f638b2130ed5e68e550d618175d96a4f181bb072f2d4ae0977599f703d7e3f2f0"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) write$binfmt_script(r0, 0x0, 0x0) 07:28:26 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x4) [ 554.540460][T21983] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 554.563049][T21983] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 07:28:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$incfs(0xffffffffffffff9c, 0x0, 0x60001, 0x1e) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x330f) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x3) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000180)={0x3, 0x8001}) r6 = dup3(r0, r1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) fchmod(r2, 0x114) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r6, r5) [ 554.605265][T21983] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 554.644703][T21983] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 554.683735][T21983] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 554.721361][T21983] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 554.765404][T22003] bridge0: port 3(bond0) entered blocking state [ 554.772732][T21983] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 554.772767][T21983] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 554.772819][T21997] ubi0: background thread "ubi_bgt0d" started, PID 21997 [ 554.801238][T22014] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 554.806833][T21986] ubi0: detaching mtd0 [ 554.810910][T22014] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 554.882987][T21986] ubi0: mtd0 is detached [ 554.894349][T22014] vhci_hcd vhci_hcd.0: Device attached [ 554.954310][T21983] ubi0: attaching mtd0 [ 554.960162][T21983] ubi0: scanning is finished [ 554.995427][T22016] vhci_hcd: connection closed [ 555.000737][ T90] vhci_hcd: stop threads [ 555.046534][ T90] vhci_hcd: release socket [ 555.051963][ T7885] vhci_hcd: vhci_device speed not set [ 555.103056][T22003] bridge0: port 3(bond0) entered disabled state [ 555.113842][ T90] vhci_hcd: disconnect device [ 555.128152][ T7885] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 555.217941][T21983] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 555.280720][T22003] device bond0 entered promiscuous mode [ 555.329665][T22003] device bond_slave_0 entered promiscuous mode 07:28:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20004800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 555.376590][T22003] device bond_slave_1 entered promiscuous mode [ 555.430987][T22003] bridge0: port 3(bond0) entered blocking state [ 555.437340][T22003] bridge0: port 3(bond0) entered forwarding state 07:28:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x800) getpeername$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) dup(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000000)) [ 555.576016][T22041] ubi0: attaching mtd0 [ 555.640200][T22041] ubi0: scanning is finished [ 555.763939][ T26] audit: type=1800 audit(1638689307.299:38): pid=21978 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=14260 res=0 errno=0 [ 555.818461][T22041] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 555.827150][T22041] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 555.878190][T22041] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 555.903819][T22041] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 555.915959][T22041] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 555.932782][T22041] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 555.946955][T22041] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 555.967204][T22041] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 555.987276][T22049] ubi0: background thread "ubi_bgt0d" started, PID 22049 [ 555.995179][T22043] ubi0: detaching mtd0 [ 555.997624][ T26] audit: type=1804 audit(1638689307.529:39): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir588992522/syzkaller.gepvBU/219/file0" dev="sda1" ino=14260 res=1 errno=0 [ 556.027704][T22043] ubi0: mtd0 is detached [ 556.037793][T22041] ubi0: attaching mtd0 [ 556.043494][T22041] ubi0: scanning is finished [ 556.196106][T22041] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:28:29 executing program 4: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) write$binfmt_script(r0, 0x0, 0x0) 07:28:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0xf000, 0x10000}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fallocate(r2, 0x3a, 0x7fffffff, 0x8000) close(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x9, 0x10007f4, 0x0, 0x0, 0x200, 0x10000020000000fb, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x6], 0x100000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x2, 0x3000, 0x2000, &(0x7f000000a000/0x2000)=nil}) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x5, 0x7, 0x9d, 0x3, 0x0, 0x5, 0x20000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c9, 0x0, @perf_config_ext={0x9, 0x99f6}, 0xa000, 0xee4, 0xa77f, 0x2, 0x1, 0x80000001, 0x9, 0x0, 0x7, 0x0, 0xffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) 07:28:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$incfs(0xffffffffffffff9c, 0x0, 0x60001, 0x1e) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x330f) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x3) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000180)={0x3, 0x8001}) r6 = dup3(r0, r1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) fchmod(r2, 0x114) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r6, r5) 07:28:29 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="e10900000000000000415a3276c36539f1ea5d0f11"]) open(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="150000005affff0180000c0800395032303030"], 0x15) r3 = dup(r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0xe5, 0x7, 0x81, 0xff, 0x9309, 0x3, 0x6, 0x6, 0x2af, 0x38, 0x153, 0x80000001, 0xd964, 0x20, 0x1, 0x0, 0xbb7b, 0x1}, [{0x0, 0x0, 0x7fffffff, 0x1, 0x0, 0x6, 0x70, 0x3ff}], "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", ['\x00', '\x00', '\x00']}, 0x1358) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x80}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 07:28:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20004c00) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:29 executing program 5: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x40, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x15) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) [ 558.040622][T22071] ubi0: attaching mtd0 [ 558.067485][T22071] ubi0: scanning is finished 07:28:30 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) write$binfmt_script(r0, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0x10010, r0, 0x16461000) [ 558.444916][T22071] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 558.471908][T22071] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 558.556408][T22071] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 558.635853][T22071] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 558.649575][T22071] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 558.682379][T22071] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:28:30 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x24) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) write$binfmt_script(r0, 0x0, 0x0) [ 558.830240][T22071] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 07:28:30 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc000000000000, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000500)='./file0\x00', &(0x7f0000000580)='hpfs\x00', 0x0, 0x0) stat(&(0x7f0000005480)='./file3\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {}, [], {}, [{0x8, 0x3, r4}, {0x8, 0x4}, {0x8, 0x5, r5}], {0x10, 0x4}}, 0x3c, 0x1) lchown(&(0x7f0000000340)='./bus\x00', r3, 0x0) r6 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x1) recvmmsg$unix(r7, &(0x7f0000002080)=[{{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000000680)=""/64, 0x40}, {&(0x7f0000000780)=""/104, 0x68}, {&(0x7f00000006c0)=""/54, 0x36}, {&(0x7f0000000800)=""/63, 0x3f}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x6, &(0x7f0000001980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001a00)=""/117, 0x75}, {&(0x7f0000001a80)=""/79, 0x4f}, {&(0x7f0000001b00)}], 0x3, &(0x7f0000001b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001c80)=""/107, 0x6b}, {&(0x7f0000001d00)=""/247, 0xf7}, {&(0x7f0000001e00)=""/2, 0x2}, {&(0x7f0000004c80)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/134, 0x86}], 0x5, &(0x7f0000002000)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="04004000"], 0x70}}], 0x3, 0x40, &(0x7f0000002140)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000008d00)={0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000001b00)=ANY=[@ANYBLOB="70000000250013072abd7000fcdbdf", @ANYRESHEX=r7, @ANYBLOB="267aaa0c0071000104"], 0x70}, {0x0}, {&(0x7f0000003000)={0x80, 0x14, 0x4, 0x0, 0x25dfdbfe, "", [@generic="9c367ab229646a8adbb037ee02f2d50cddf8564d3b28386e53447da357ef29f7fdaa94364a80613920409d36cc42", @nested={0x3e, 0x4a, 0x0, 0x1, [@typed={0xc, 0x60, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x2d, 0x0, 0x0, @u32=0x3ff}, @generic="d3d1b72bfcfa7546fdb9f8089c571d753d11d2a30e12ece09eb4", @typed={0xc, 0x0, 0x0, 0x0, @u64=0x800020}]}]}, 0x80}, {&(0x7f0000000940)=ANY=[@ANYBLOB="100000fcffffff0300000000ffdbdf25"], 0x10}, {&(0x7f0000005d80)={0x718, 0x26, 0x0, 0x0, 0x25dfdbff, "", [@generic="c1c244b0ed3304775dd40e5830ca564a98f7fa9135268e1c988ef71388d9c0bdb5b20168639fa9a4dcb74b9f5b9314725c4424a0f18cc9afcce28b4bcdd0b32d240b9e3d4d96391622d4bb30cc985d97d3dea70396089ee14068fba50c044bf15a7d205caccb591f8f21f1c2af85152709cd141b622553f19d08779ff4b5565aa06ad073d210e6fa0cb1f65f", @nested={0x4, 0x0, 0x0, 0x1, [@generic]}, @nested={0x677, 0x0, 0x0, 0x1, [@generic, @generic, @generic='s', @generic="ab11798bfb9c76f40e0d6644f9", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="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"]}]}, 0x718}], 0x5, &(0x7f0000002180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r7]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r8}}}], 0xb8, 0x50}, 0x840) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 558.931233][T22071] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 558.955493][T22096] ubi0: background thread "ubi_bgt0d" started, PID 22096 [ 558.955540][T22074] ubi0: detaching mtd0 [ 558.983444][T22074] ubi0: mtd0 is detached 07:28:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$incfs(0xffffffffffffff9c, 0x0, 0x60001, 0x1e) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x330f) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x3) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000180)={0x3, 0x8001}) r6 = dup3(r0, r1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) fchmod(r2, 0x114) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r6, r5) [ 559.003995][T22082] ubi0: attaching mtd0 [ 559.011662][T22082] ubi0: scanning is finished [ 559.179902][T22082] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:28:30 executing program 4: futex(&(0x7f0000000300), 0x80, 0x1, &(0x7f0000000340), &(0x7f0000000380), 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) futex(&(0x7f0000000200)=0x2, 0x2, 0x1, &(0x7f0000000240), &(0x7f0000000780)=0x2, 0x1) write$binfmt_script(r0, 0x0, 0x0) r1 = syz_mount_image$hpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1f, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="e918026d4cad5340995f86a3a107b0b64078dc046b026e61936986d7c27789633494c380893a815cdd1e48472d45462c2c48af6f85aadb1128f1ab2ad6a8c919545cc4b7399d393b239d45eeb6d1ff93a9e25eeb40e745ff99471168e521586ed86db4c7079adde3cfebeadd82d742dd99fafc4768aaa4ad48b01294685d8c0c374e7912d3141eb99361cefa0b794f34802c1929686aecc3f1efaed8694f63f17bb3a1acf29c2e6b9c8402aacd1aabb283bee0d5b40b294c348f9b5361e010c1df", 0xc1, 0x6a}], 0x448, &(0x7f0000000840)=ANY=[@ANYBLOB='/dev/ppp\x00,/dev/ppp\x00,uid>', @ANYRESDEC, @ANYBLOB=',measure,uid<', @ANYRESDEC, @ANYBLOB="2c736d61636b6673666c6f6f723d2c646566636f6e746578743d73797374656d5f752c636f6e746578743d73797361646d5f752c666f776e65723c1ad25ceb291cb655f560a74b1d7297d93412842e1779bd1cca53a27a7466273024c344bd75fff5a47ec8849d87eef00e91918f42897aaa9dfb31fd2dfca0da7e7a447950b0a0c67918de92877af33c19fd54f0956f76ea1508e409a2529c5d25bf12a759c1ed5268062f509fc882e74d6c8bff57b53d7d39b4dae7462bfb98616ede028709ffaa333bf1a29b0df9cd2d07c88de48c6b0d313ffa8bff511bfb1de5aaa83c52d85b3d2e04edc887ea6c016656bbe65a", @ANYRESDEC=0xee01, @ANYBLOB="2c7375626a5f757365723d292a2c25707072616973655f747970653d696d617369672c002c04b18a92b84b3d54250015e24104b7cf92fe1dd6114e3282ee69165fb3810fb7ce432e7ad3a6eb852862b0086171a10fef95e8962b9ac08ba5f7bfba07720247c9b02e95c7879e20a8a712624ea8274b83ffc4a97ea50f1a8a913d85113e36b90d136f1b5d528b214dc7db53d855e117de32abca92daffe4c710b87cab0390b4ee9db54b4578ad059f2552f0c556b0589f34e3e8100531cb00000000"]) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x110, r1, 0x8f3de000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000002c0)=0x4092) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0), 0xc000, 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f0000000400)="adfae58f0105f01253905aa56ebed8dc9b85904b7ba2a50b3bc1e8247380d278c7c2afed2fc39152620b10cdf2cf37e128d0a5c6646cb9", 0x37}, {&(0x7f0000000480)="f10ff22a9ae2ed20838e4b455aa54c1ea21c27e46733164accc46c67ed7dba56c1102e8dee2498bcb10d9da9d1de0c32a74bbcbdc5f135039c3d1e80203997882592f8b74d16876ac590d86970c60bbcb89c41a18a9a009f97ab974c394c6df31a8458bd45ba420dfb74", 0x6a}, {&(0x7f0000000500)="17a295b4679889f587", 0x9}], 0x3, 0x1f, 0x7f) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="727370616e3000000000000000000000009f615bd086c37e20", @ANYRES32=0x0, @ANYBLOB="6700000700000040000000808809000000000000210490787f000001ac1414bb07596d6567369975"]}) bind$can_raw(r2, &(0x7f0000000800)={0x1d, r3}, 0x10) 07:28:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20006000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000210000000c0005000200aaaaaaaaaaaa09001f0070687931000000000500200000000000aa11769515cd5cf1addf595f41602fa73ba5a5eceeb425242948c123627f1efaa78d75c754b333ef0a2528e0670bb7a7fdfcd7f0b1898e3d2f358a343d732b7287a9c9ad45fa509be4530d0f36f3e943fe5fa1fa375fa0f7a33e0e7500470a5ea35c4a7ea1ba8ad71cb4a37f9d5fcd27ee682213ab08939330d54a2ff5104f2a374f07c644bb4509b2c906544a71"], 0x34}}, 0x0) [ 559.771643][T22140] ubi0: attaching mtd0 [ 559.800458][T22140] ubi0: scanning is finished [ 559.815879][T22139] hpfs: bad mount options. [ 559.973591][T22148] hpfs: bad mount options. 07:28:31 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2b0c43, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) write$binfmt_script(r0, 0x0, 0x0) 07:28:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x800, 0x100) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x30397cfbeca4eaa6, &(0x7f0000000080)=[{&(0x7f0000000040)="e028030029000305d25a80648c63940d0424fc60106c11400a210000013582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) [ 560.065284][T22140] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 560.088956][T22140] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 560.130142][T22140] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 560.158692][T22140] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 560.184010][T22140] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 560.221335][T22140] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 560.232303][T22172] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 560.245944][T22140] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 560.258004][ T7885] vhci_hcd: vhci_device speed not set [ 560.297037][T22183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 560.298439][T22140] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 560.377490][T22158] ubi0: background thread "ubi_bgt0d" started, PID 22158 [ 560.384754][T22146] ubi0: detaching mtd0 [ 560.395765][T22187] netlink: 179388 bytes leftover after parsing attributes in process `syz-executor.1'. [ 560.441434][T22146] ubi0: mtd0 is detached [ 560.445054][T22140] ubi0: attaching mtd0 [ 560.446167][T22140] ubi0: scanning is finished [ 560.541376][T22140] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 561.118155][T22188] netlink: 179388 bytes leftover after parsing attributes in process `syz-executor.1'. 07:28:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x40186f40, 0x20006000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) listen(0xffffffffffffffff, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r2 = getpid() r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18800061}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@bridge_delneigh={0x74, 0x1d, 0x4, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x0, 0x11, 0x5}, [@NDA_DST_IPV6={0x14, 0x1, @loopback}, @NDA_CACHEINFO={0x14, 0x3, {0x8, 0x6, 0x3ff, 0x3}}, @NDA_VNI={0x8, 0x7, 0x8001}, @NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_PROBES={0x8, 0x4, 0x800}]}, 0x74}, 0x1, 0x0, 0x0, 0x14008080}, 0x4000000) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) 07:28:32 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x9, &(0x7f00000000c0)=@framed={{}, [@btf_id, @initr0, @exit, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x100}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48400000030000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000000005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000100000000000030007000c0001007463696e646578000c000200080001"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 561.411299][T22220] ubi0: attaching mtd0 [ 561.486993][T22220] ubi0: scanning is finished [ 561.714551][T22220] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 561.725005][T22220] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 561.752983][T22220] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 561.774431][T22220] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 561.792653][T22220] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 561.807746][T22220] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 561.816184][T22220] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 561.847698][T22220] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 561.867825][T22226] ubi0: background thread "ubi_bgt0d" started, PID 22226 [ 561.875011][T22222] ubi0: detaching mtd0 [ 561.889333][T22222] ubi0: mtd0 is detached 07:28:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20006800) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:33 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000480)=0x3f, 0x4) dup2(r0, r1) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="c498d91d83fa04505f324b5f0b690a2aee767507cf6b89e57a4fb6780caab478dc823888a885ba9efb047ada41c42910", 0x30}, {&(0x7f00000000c0)="f1062c15326d3fbeb9d8bf09291cc08690c194a580b0e58977855797b86b0675d43926a16a64fbde4518f0df113aa0544883862b3b459d58ff30ba0c267ea1fef58aff7003b616c3b84ea963f8bb9717810b8fc8de55d804e57498df66b753d22159c2c8864c16c757cbfe86295e87a44ab49ca89c670ce2082e1804eda0e2bbc6199a51aaefcb5aa69663a00be9e8e5ec5b1656e9778f3dfbd77d3607a2", 0x9e}, {&(0x7f0000000180)}], 0x3, &(0x7f00000004c0)=[{0x1010, 0x10d, 0x5, "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"}, {0x98, 0x119, 0x5, "35dacb49146dfddfc7faeb69ce3d3e31c6ff875ff30bfcb34a83612f456ef74c05d9d18e31f6670f61fd839506f16665b588cccb4bf642e51a92db4d33a8879530a11dedabc3850fcbb4e0a7bd857f68fd068083d4b7d7afd7305b0c19a9fe272c36edb1823fe4a17ddc8604be4f88ffa942d26f7a58a3801d1ecbbff1f2de0c65850a35410ffd"}, {0xb0, 0x29, 0x8, "27032af8e2791c07544e3c7e70f7b001f1d8e73d13dd76fc3070c4497cff5f75e27e63444b595deb1485bf1f381f1566ff51809a41c00b94daca9bf4ac726eebeca57bb95c0888f746bcd9d2f6edaf892a38058d29d7681a2bb2c0b5f38d7e7b5ce6d2cca8f4ff9bfbe736ab075011619755da53a00ea4fefb8767410a0c73a82391c1f5dfe4a2673d9778d2c6dd8ed95e31f94da5c619dac117af40914f"}, {0x90, 0x88, 0xa4, "7f0e5d7bfda8f51396f4605b112c2866cdb66b2e702339ae380330a7fec898b9dd8c3b4cc6960e1e33c269e7ca675ea0fb0e61d569edab29a9708d5d697c692a8997345e2718e8cb2f28582375df64a7731130fe167ebe30cc26e72b3e114dbfbb6390234e6cc6ef450f4f2093e0e9a95e9d54d65b34de70e8f74f9de6"}, {0xd0, 0x29, 0x81, "883f919e64b093ce01108e3575d0476af087b288bbcd7980c3aa35535aad7da378a60a02780ca31111a51d0e42de5b12c0c0a713c1b14189bd9be70f06993dfe6daf073b7da5a08fcff0afe077e2cbd0f9c412c352f2db97df9187daff52a615a5501ed21eab130fa0b5f1844aaadfd776f3406e2752c439be22d966ae95052a7c4833dba67c4547aca9f556eb74f36005807ff838f59e9bbd00f2644bee82c3a600106ff8b302881bcb6d13c51e6e123fbe1d314ec98de66905ad"}], 0x12b8}, 0x80) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x2, 0x4) 07:28:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x800, 0x100) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x30397cfbeca4eaa6, &(0x7f0000000080)=[{&(0x7f0000000040)="e028030029000305d25a80648c63940d0424fc60106c11400a210000013582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) 07:28:33 executing program 3: gettid() r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000001a80)=ANY=[@ANYBLOB="2321202e2f66696c653020cde4b352b7a0e0617105f8e29e23fb42507b87b9ec0431bb18e482db4653f8ce89f2dcfea0f301aa469fa07bff030000a936872ae8edab7acaaa552ac0e390682c624210e8c5a689d19f3765a51206009f06299edba788a0b235049c6c704589efbf0268808c7122c4780ffd5c378325cf24b192e6e9fefe0cbed9be74ca65dcc92766d05838251676c5e50f22c457bd74c7"], 0x1c6) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x1ff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000140)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000300)={0x1, 'bridge_slave_1\x00', 0x3}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1860}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x5, 0x6, 0x0, 0x9, 0x0, 0x80000000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x6, 0x4, 0x1, 0x4, 0x3, 0x8, 0x0, 0x0, 0x0, 0x4}, r4, 0x3, r3, 0x6) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8) getpid() getpid() [ 562.219441][T22236] ubi0: attaching mtd0 07:28:33 executing program 5: r0 = semget$private(0x0, 0x207, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000001c0)=""/42) semctl$IPC_RMID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x3b6af0}], 0x7d, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) [ 562.255348][T22236] ubi0: scanning is finished 07:28:33 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000480)=0x3f, 0x4) dup2(r0, r1) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="c498d91d83fa04505f324b5f0b690a2aee767507cf6b89e57a4fb6780caab478dc823888a885ba9efb047ada41c42910", 0x30}, {&(0x7f00000000c0)="f1062c15326d3fbeb9d8bf09291cc08690c194a580b0e58977855797b86b0675d43926a16a64fbde4518f0df113aa0544883862b3b459d58ff30ba0c267ea1fef58aff7003b616c3b84ea963f8bb9717810b8fc8de55d804e57498df66b753d22159c2c8864c16c757cbfe86295e87a44ab49ca89c670ce2082e1804eda0e2bbc6199a51aaefcb5aa69663a00be9e8e5ec5b1656e9778f3dfbd77d3607a2", 0x9e}, {&(0x7f0000000180)}], 0x3, &(0x7f00000004c0)=[{0x1010, 0x10d, 0x5, "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"}, {0x98, 0x119, 0x5, "35dacb49146dfddfc7faeb69ce3d3e31c6ff875ff30bfcb34a83612f456ef74c05d9d18e31f6670f61fd839506f16665b588cccb4bf642e51a92db4d33a8879530a11dedabc3850fcbb4e0a7bd857f68fd068083d4b7d7afd7305b0c19a9fe272c36edb1823fe4a17ddc8604be4f88ffa942d26f7a58a3801d1ecbbff1f2de0c65850a35410ffd"}, {0xb0, 0x29, 0x8, "27032af8e2791c07544e3c7e70f7b001f1d8e73d13dd76fc3070c4497cff5f75e27e63444b595deb1485bf1f381f1566ff51809a41c00b94daca9bf4ac726eebeca57bb95c0888f746bcd9d2f6edaf892a38058d29d7681a2bb2c0b5f38d7e7b5ce6d2cca8f4ff9bfbe736ab075011619755da53a00ea4fefb8767410a0c73a82391c1f5dfe4a2673d9778d2c6dd8ed95e31f94da5c619dac117af40914f"}, {0x90, 0x88, 0xa4, "7f0e5d7bfda8f51396f4605b112c2866cdb66b2e702339ae380330a7fec898b9dd8c3b4cc6960e1e33c269e7ca675ea0fb0e61d569edab29a9708d5d697c692a8997345e2718e8cb2f28582375df64a7731130fe167ebe30cc26e72b3e114dbfbb6390234e6cc6ef450f4f2093e0e9a95e9d54d65b34de70e8f74f9de6"}, {0xd0, 0x29, 0x81, "883f919e64b093ce01108e3575d0476af087b288bbcd7980c3aa35535aad7da378a60a02780ca31111a51d0e42de5b12c0c0a713c1b14189bd9be70f06993dfe6daf073b7da5a08fcff0afe077e2cbd0f9c412c352f2db97df9187daff52a615a5501ed21eab130fa0b5f1844aaadfd776f3406e2752c439be22d966ae95052a7c4833dba67c4547aca9f556eb74f36005807ff838f59e9bbd00f2644bee82c3a600106ff8b302881bcb6d13c51e6e123fbe1d314ec98de66905ad"}], 0x12b8}, 0x80) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x2, 0x4) [ 562.321591][T22240] netlink: 179388 bytes leftover after parsing attributes in process `syz-executor.1'. 07:28:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40014}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x77, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000a0101000000000001ff000064010100e00000"], 0x18) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) close(r0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0xc0, 0x0, 0x148, 0xc0, 0x170, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0xf102, 0x0, 'wg0\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = signalfd4(r3, &(0x7f0000000280), 0x8, 0x80800) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000210001002cbd7000fedbdf14000100fe80313457dd0e00000000000000000000000000bbaa6857679739eeaaf6f76682b53e3edf0c74685ca163f0d1334662208f6620b2b742b31682eb3041802df493374d3268e7a7002ea90c4c08a5f368f0bc18171f8db87cedb56b7ed8a51a188fea76e7a93c8b6088803b460c194ef7b809129605dfc1a2ef1703d1baca8dda71ede870627112d8f37a793d24e8c6ca5800"/177], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x20005001) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) [ 562.366721][T22249] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_1, syncid = 3, id = 0 [ 562.462092][T22236] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 562.493049][T22236] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 562.539135][T22236] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 562.581485][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.588660][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.599266][T22236] ubi0: VID header offset: 64 (aligned 64), data offset: 128 07:28:34 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000480)=0x3f, 0x4) dup2(r0, r1) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="c498d91d83fa04505f324b5f0b690a2aee767507cf6b89e57a4fb6780caab478dc823888a885ba9efb047ada41c42910", 0x30}, {&(0x7f00000000c0)="f1062c15326d3fbeb9d8bf09291cc08690c194a580b0e58977855797b86b0675d43926a16a64fbde4518f0df113aa0544883862b3b459d58ff30ba0c267ea1fef58aff7003b616c3b84ea963f8bb9717810b8fc8de55d804e57498df66b753d22159c2c8864c16c757cbfe86295e87a44ab49ca89c670ce2082e1804eda0e2bbc6199a51aaefcb5aa69663a00be9e8e5ec5b1656e9778f3dfbd77d3607a2", 0x9e}, {&(0x7f0000000180)}], 0x3, &(0x7f00000004c0)=[{0x1010, 0x10d, 0x5, "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"}, {0x98, 0x119, 0x5, "35dacb49146dfddfc7faeb69ce3d3e31c6ff875ff30bfcb34a83612f456ef74c05d9d18e31f6670f61fd839506f16665b588cccb4bf642e51a92db4d33a8879530a11dedabc3850fcbb4e0a7bd857f68fd068083d4b7d7afd7305b0c19a9fe272c36edb1823fe4a17ddc8604be4f88ffa942d26f7a58a3801d1ecbbff1f2de0c65850a35410ffd"}, {0xb0, 0x29, 0x8, "27032af8e2791c07544e3c7e70f7b001f1d8e73d13dd76fc3070c4497cff5f75e27e63444b595deb1485bf1f381f1566ff51809a41c00b94daca9bf4ac726eebeca57bb95c0888f746bcd9d2f6edaf892a38058d29d7681a2bb2c0b5f38d7e7b5ce6d2cca8f4ff9bfbe736ab075011619755da53a00ea4fefb8767410a0c73a82391c1f5dfe4a2673d9778d2c6dd8ed95e31f94da5c619dac117af40914f"}, {0x90, 0x88, 0xa4, "7f0e5d7bfda8f51396f4605b112c2866cdb66b2e702339ae380330a7fec898b9dd8c3b4cc6960e1e33c269e7ca675ea0fb0e61d569edab29a9708d5d697c692a8997345e2718e8cb2f28582375df64a7731130fe167ebe30cc26e72b3e114dbfbb6390234e6cc6ef450f4f2093e0e9a95e9d54d65b34de70e8f74f9de6"}, {0xd0, 0x29, 0x81, "883f919e64b093ce01108e3575d0476af087b288bbcd7980c3aa35535aad7da378a60a02780ca31111a51d0e42de5b12c0c0a713c1b14189bd9be70f06993dfe6daf073b7da5a08fcff0afe077e2cbd0f9c412c352f2db97df9187daff52a615a5501ed21eab130fa0b5f1844aaadfd776f3406e2752c439be22d966ae95052a7c4833dba67c4547aca9f556eb74f36005807ff838f59e9bbd00f2644bee82c3a600106ff8b302881bcb6d13c51e6e123fbe1d314ec98de66905ad"}], 0x12b8}, 0x80) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x2, 0x4) [ 562.676560][T22236] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 562.741938][T22236] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 562.806699][T22236] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 562.893320][T22236] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 562.911052][T22267] x_tables: ip_tables: ah match: only valid for protocol 51 [ 562.960336][T22243] ubi0: detaching mtd0 [ 562.961538][T22256] ubi0: background thread "ubi_bgt0d" started, PID 22256 07:28:34 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000480)=0x3f, 0x4) dup2(r0, r1) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="c498d91d83fa04505f324b5f0b690a2aee767507cf6b89e57a4fb6780caab478dc823888a885ba9efb047ada41c42910", 0x30}, {&(0x7f00000000c0)="f1062c15326d3fbeb9d8bf09291cc08690c194a580b0e58977855797b86b0675d43926a16a64fbde4518f0df113aa0544883862b3b459d58ff30ba0c267ea1fef58aff7003b616c3b84ea963f8bb9717810b8fc8de55d804e57498df66b753d22159c2c8864c16c757cbfe86295e87a44ab49ca89c670ce2082e1804eda0e2bbc6199a51aaefcb5aa69663a00be9e8e5ec5b1656e9778f3dfbd77d3607a2", 0x9e}, {&(0x7f0000000180)}], 0x3, &(0x7f00000004c0)=[{0x1010, 0x10d, 0x5, "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"}, {0x98, 0x119, 0x5, "35dacb49146dfddfc7faeb69ce3d3e31c6ff875ff30bfcb34a83612f456ef74c05d9d18e31f6670f61fd839506f16665b588cccb4bf642e51a92db4d33a8879530a11dedabc3850fcbb4e0a7bd857f68fd068083d4b7d7afd7305b0c19a9fe272c36edb1823fe4a17ddc8604be4f88ffa942d26f7a58a3801d1ecbbff1f2de0c65850a35410ffd"}, {0xb0, 0x29, 0x8, "27032af8e2791c07544e3c7e70f7b001f1d8e73d13dd76fc3070c4497cff5f75e27e63444b595deb1485bf1f381f1566ff51809a41c00b94daca9bf4ac726eebeca57bb95c0888f746bcd9d2f6edaf892a38058d29d7681a2bb2c0b5f38d7e7b5ce6d2cca8f4ff9bfbe736ab075011619755da53a00ea4fefb8767410a0c73a82391c1f5dfe4a2673d9778d2c6dd8ed95e31f94da5c619dac117af40914f"}, {0x90, 0x88, 0xa4, "7f0e5d7bfda8f51396f4605b112c2866cdb66b2e702339ae380330a7fec898b9dd8c3b4cc6960e1e33c269e7ca675ea0fb0e61d569edab29a9708d5d697c692a8997345e2718e8cb2f28582375df64a7731130fe167ebe30cc26e72b3e114dbfbb6390234e6cc6ef450f4f2093e0e9a95e9d54d65b34de70e8f74f9de6"}, {0xd0, 0x29, 0x81, "883f919e64b093ce01108e3575d0476af087b288bbcd7980c3aa35535aad7da378a60a02780ca31111a51d0e42de5b12c0c0a713c1b14189bd9be70f06993dfe6daf073b7da5a08fcff0afe077e2cbd0f9c412c352f2db97df9187daff52a615a5501ed21eab130fa0b5f1844aaadfd776f3406e2752c439be22d966ae95052a7c4833dba67c4547aca9f556eb74f36005807ff838f59e9bbd00f2644bee82c3a600106ff8b302881bcb6d13c51e6e123fbe1d314ec98de66905ad"}], 0x12b8}, 0x80) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180)=0x2, 0x4) [ 563.006449][T22243] ubi0: mtd0 is detached [ 563.020311][T22267] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 563.023479][T22236] ubi0: attaching mtd0 [ 563.035348][T22236] ubi0: scanning is finished 07:28:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) mount(0x0, 0x0, &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) chdir(0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x80080, &(0x7f0000000440)=ANY=[@ANYBLOB='mode=00000000000000000000000,mode=00000000000000000000001,mode=00000000000000000000003,mode=000000000000\x000000055045,mode=00000000000037777777777,uid>', @ANYRESDEC=0xee01, @ANYBLOB=',appraise_type=imasig,\x00']) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x6d, 0x81, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x3f}, 0x59e02, 0x3f, 0x0, 0x9, 0x40, 0x2b4, 0x3ff, 0x0, 0x8001, 0x0, 0x101}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) mkdir(&(0x7f0000000240)='./file0\x00', 0x3f) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r2 = openat(r1, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) gettid() write(r2, &(0x7f0000004200)='t', 0xfff4) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(r2, 0x0, &(0x7f00000000c0)) [ 563.358615][T22236] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 563.529407][T22220] ubi0: attaching mtd0 [ 563.569997][T22220] ubi0: scanning is finished [ 563.677718][T22220] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 563.688550][T22220] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 563.696102][T22220] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 563.717499][T22220] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 563.725047][T22220] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 563.733423][T22220] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 563.742847][T22220] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 563.753778][T22220] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 563.765957][T22295] ubi0: background thread "ubi_bgt0d" started, PID 22295 07:28:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x4, 0x3, 0x32, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1f, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0xe8ca, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x81, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xfa, @ipv4={'\x00', '\xff\xff', @local}, 0x4bb}, 0x1c) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) write$binfmt_script(0xffffffffffffffff, 0x0, 0x191) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000540), 0x2bf70) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00\x00d\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000000000000000000000b000100666c6fdf6572000014000200100054800c0003800800010000000000e15f7867bfaf39e7cc6c13a94a35955056967d8ef4830c0cd6cbf85f149b9c2774d6cb5fb9fa5342bf4432a6405ace775cbf32ff8fd4d4252817678ac28d124d3a7b8867dc6e9070ec1ff0867fca7f7d3062deb183ec00f2ccf640c4fa8d0e35a778540c2bfae25b6cf227167873000bb6352f0accfbd390e6f4f35812fe123b76ce41654f13635de6725e13f9aaf567daf8dd82b69652c4fbf9"], 0x44}}, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000100)=0x3) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1208, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc028660f, &(0x7f00000005c0)=0x40c000002) lseek(r2, 0x200009, 0x0) 07:28:35 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000000000000004000018000000000000000000"], 0x0, 0x26}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32, @ANYBLOB='veth'], 0x48}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000004c0)="20b7d90f261ac29170ab466f69e4fb71eb72b6b740b367ed34d4e803efc3286db99ebebed6005727a592bdf72018c8b04e17e7bccbc2741672891da805a43b3d06c35e3df7f37a62eff311e4b37aabbc2a8893691e8617558b10052b4f804d72b4995fb1fe0c300022fe4b5648cb8fbdb91782ee85fda246395369cf5f38abe6a8e26e2730f8a803b330eb4a1ef7852e2f30db8a793fec5de637af22ae4d00ededc509cb6c09f0ddeeb99769a6b94ac21b83a7747c5e1fcb8489d289c1f5309149260d840d2e9f8e3f469bcbb3774fe9c187df3cdc914f25", 0xd8}, {&(0x7f00000005c0)="d0c153201afc75042964a5b1a42be5283b2cffd5a4cb14266ff838fcb059e9c1ca4f16d02163b8eabd28b41ff69814d2bdbd782f1ef75d60f540d9645b2dd257a6f539c6f0e56a9f236f2e29012bd61b52f51daea32b18fea924f9d933c4555845aea20d3d16d360b4b415d9f610a3a839f968f858cbd93a", 0x78}], 0x2, 0x4) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0xfffffffffffffffe, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000120000012bbd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="020000000100000008001e000a00000008001e000400000008001f004000008036cb60d45fd4c3cbaea1b1e6b58395b2b2eb7fa9f71b3f2f496e189bb8124bc3bc50196b8e5ac54a222c1235a7794d8329685a1a81c6de9ca5f472f7cd051d2508d35ae04b90cba3e846951f2969e8bdd5465adce41a"], 0x38}, 0x1, 0x0, 0x0, 0x8015}, 0xc040) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="441300006400270d00"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000000000000b000100666c6f776572000014000200100054800c0003800800010000000000"], 0x44}}, 0x0) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000140)="d651dcd007742f07d9c1ef5bae3df536ed5410dd880dbbd5361a76fe2e52948652340e74f7a007c3020a7ed360aef514ce4ba7ae343ca78b012c231cdf7f65d7dd10df994ebb37a2b33e70f69d246db15aa34176e6406f5d3f", 0x59}, {&(0x7f00000001c0)="9af681840e84f77810746e3f10b7e2109821", 0x12}], 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x634}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x14, 0x0, 0x0, 0x2, &(0x7f0000000200), 0x2}, 0x6d) 07:28:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cgroup.events\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$incfs(r1, &(0x7f0000000140)='.pending_reads\x00', 0x800, 0x100) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x30397cfbeca4eaa6, &(0x7f0000000080)=[{&(0x7f0000000040)="e028030029000305d25a80648c63940d0424fc60106c11400a210000013582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) accept$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) 07:28:35 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000001000010600000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000a2a0400580012800b0001006272696467650000480002800500160000000000050017000000000008001b00680000000800050000000000080001001e00000008001b00020000000c001f00fe07000000000000050018000000000008000500", @ANYRES32=0x0, @ANYBLOB="e68d7a130dff1200", @ANYRES32, @ANYBLOB], 0x88}}, 0x0) 07:28:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20006c00) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:35 executing program 3: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x80000000000000, 0x0, 0x6, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x3fed292}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) rt_sigqueueinfo(0x0, 0x2f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="3e660fc775a7b8a6000f00d00f320f79fd66b9ab03000066b80060000066ba000000000f30f3e10e0f0ffaae65660f2d0d0f01c266b8010000000f01c1", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000080)={0x1ff}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000680)={0x0, 0x0, @pic={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1f}}) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffbffffff, 0x0, 0x0, 0x4, 0x4, 0x4, 0x400000004c8, 0x10000, 0x0, 0x0, 0x1000000000, 0x80000000, 0x3, 0x0, 0x7], 0x10000, 0x8800}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x9) [ 563.776153][T22222] ubi0: detaching mtd0 [ 563.783386][T22222] ubi0: mtd0 is detached [ 563.888652][T22303] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 563.891667][T22304] ubi0: attaching mtd0 [ 563.971196][T22304] ubi0: scanning is finished [ 563.976372][T22309] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.067297][T22320] netlink: 179388 bytes leftover after parsing attributes in process `syz-executor.1'. [ 564.105058][T22307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 564.115815][T22304] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 564.144912][T22304] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 564.212410][T22304] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 564.266485][T22304] ubi0: VID header offset: 64 (aligned 64), data offset: 128 07:28:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010001fff0000268a1c872dd436dc9200", @ANYRES32=0x0, @ANYBLOB="ff460d0000150000140012800b00010076786c616e0000000400028008000a002615a3053e"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x40001}, 0x4000) r1 = socket(0x10, 0x80002, 0x0) pipe2(&(0x7f0000000040), 0x4800) perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0x3f, 0x8, 0x9, 0x98, 0x0, 0xfffffffffffffff7, 0x50, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0xe6, 0xffffffff80000000}, 0x448c8, 0x8, 0xd3f3, 0x14, 0xaeb, 0x0, 0x1, 0x0, 0x6622, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e23, 0x5, @local, 0xfff}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000001340)="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", 0xfe0}, {0x0}, {&(0x7f00000005c0)}, {&(0x7f00000006c0)="99b5e5b2cca96f3eea00f6ca6f060492a5d3909fc97b9e6cc557336a5321d4e26ef3b8859ed0101b98723523a0750336719baaabe7c0d7576a8df3689661edaaa9a543a5638e6c40943b788d981fb8a8e106ca98aca506589ffadccacf6132c43b599c2aeb6db2ceb4a81875bab1a42070b5624afe9e93ad320da27f06ef1ff2d46b9b1571", 0x85}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000f0000000029002e0034d90000010000000000000014000000000000002900"/48], 0x30}, 0x10) ptrace$cont(0x7, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000004c0)=0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffea2, 0x80000, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, @perf_bp={0x0, 0x4}, 0x20, 0x0, 0x1, 0x9, 0xff, 0x7, 0x0, 0x0, 0xffff1039}, r2, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x2, 0x4, 0x3, 0x0, 0xb2f, 0x9, 0x6aa9, 0x0, 0x2}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000180)="5f414edf76ebe292d04385da82d3a72ff69845abf446acb63dfd076a9f96ef") sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) [ 564.336934][T22305] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 564.337874][T22304] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 07:28:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) syz_mount_image$ntfs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000014c0), 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0]) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7774, 0x1, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0xfd}], 0x320000, &(0x7f00000000c0)={[{}, {@nls={'nls', 0x3d, 'cp860'}}], [{@fsname={'fsname', 0x3d, ','}}]}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', r3}, 0x10) 07:28:36 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000001000010600000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000a2a0400580012800b0001006272696467650000480002800500160000000000050017000000000008001b00680000000800050000000000080001001e00000008001b00020000000c001f00fe07000000000000050018000000000008000500", @ANYRES32=0x0, @ANYBLOB="e68d7a130dff1200", @ANYRES32, @ANYBLOB], 0x88}}, 0x0) [ 564.508809][T22304] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 564.608072][T22304] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 564.701298][T22304] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 564.766182][T22315] ubi0: detaching mtd0 [ 564.766236][T22336] ubi0: background thread "ubi_bgt0d" started, PID 22336 [ 564.808182][T22315] ubi0: mtd0 is detached 07:28:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20007400) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 564.905618][T22362] ntfs: (device loop4): parse_options(): Unrecognized mount option 00000000000000000003. [ 565.097872][T22372] ubi0: attaching mtd0 [ 565.113506][T22372] ubi0: scanning is finished [ 565.226098][T22372] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 565.236237][T22372] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 565.244511][T22372] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 565.252975][T22372] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 565.269546][T22372] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 565.283230][T22372] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 565.304007][T22372] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 565.343852][T22372] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 565.373743][T22358] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 565.441415][T22378] ubi0: background thread "ubi_bgt0d" started, PID 22378 [ 565.441437][T22374] ubi0: detaching mtd0 [ 565.463616][T22359] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 565.489299][T22374] ubi0: mtd0 is detached 07:28:37 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f000000ae40), 0x400400, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f000000af40)={&(0x7f000000ae80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f000000af00)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0e18d2b4b804b04d0da04f119dba91b30000000209010300000000000000000c0000030800054000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = socket(0x10, 0x803, 0x0) syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x242080) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000880)={0x0, "8ae8f823795797970bdae7318daf7f13"}) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f0000000280)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/100, 0x64}, {&(0x7f0000000740)=""/70, 0x46}, {&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000000)=""/12, 0xc}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) [ 565.539861][T22372] ubi0: attaching mtd0 [ 565.549331][T22372] ubi0: scanning is finished [ 565.645688][T22358] ntfs: (device loop4): parse_options(): Unrecognized mount option 00000000000000000003. [ 565.661435][T22362] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 565.661890][T22353] syz-executor.2 (22353) used greatest stack depth: 21656 bytes left 07:28:37 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="880000001000010600000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000a2a0400580012800b0001006272696467650000480002800500160000000000050017000000000008001b00680000000800050000000000080001001e00000008001b00020000000c001f00fe07000000000000050018000000000008000500", @ANYRES32=0x0, @ANYBLOB="e68d7a130dff1200", @ANYRES32, @ANYBLOB], 0x88}}, 0x0) [ 565.691448][T22409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:28:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendfile(r2, r1, &(0x7f0000000140)=0x1b4, 0x7fffffff) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x1ff}, 0x1c) r3 = memfd_secret(0x0) ioctl$sock_ifreq(r3, 0x89a2, &(0x7f0000000080)={'erspan0\x00', @ifru_flags}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffffffffffff8}}, './file0\x00'}) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000180)={0x100, {{0xa, 0x4e24, 0x9, @private1, 0xffff}}}, 0x88) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0x5, @mcast2, 0x9}, {0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}, 0xffffffff}, 0x1, [0x1, 0x7fff, 0x3f, 0x80000000, 0x4, 0x739b, 0x7, 0x800]}, 0x5c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) write$binfmt_aout(r5, &(0x7f00000002c0)={{0x107, 0x9, 0x4, 0x21, 0x344, 0x5, 0x1e, 0x9}, "976896e6e27cc51bcc7bf6e4bf0580fe001c6dd39102338a5dcbb987753af825a4a7bb790253a4f299b84e8c99", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x74d) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "67b3ed0d5c5a27bb", "f2b4a5b43e2317ad0be0ecb2661d322f", "106be762", "bef3a2b3e410f544"}, 0x28) [ 565.735637][T22372] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:28:37 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x6, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x5646, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000000)={0x0, 0x9, "bfa60422fb9e9e7453d232ca9032f5576fbd894161737644f52d5637040f5a0e", 0x400, 0x4eb, 0x2, 0xff, 0x2, 0x9, 0x80000001, 0x5, [0x7a9, 0x4f, 0x1000, 0x6]}) 07:28:37 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='ext4_es_insert_delayed_block\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000024000b0f00"/19, @ANYRES32=0x0, @ANYBLOB="0000e200ffffffff000000000a000100635420006c00000014522d58a5e6b109200008000800050000000080631e9048691e9bbd087cf243c76a483e77e48e0b6b1ebf6b3140c8"], 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2], 0x0, 0x366d, 0xa2, &(0x7f0000000300)=""/162, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0xc, 0xfffffff9}, 0x10}, 0x78) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="85100000feffffff183100c855f1ae00000000000000ecad949bcecc018f8f37eb00000000000000836019ef0e0342763d43ddc9b3bab495ec1ee5acf7bbbd7386e5826441"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r4}, 0x78) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x85, &(0x7f00000003c0)=""/133, 0x41000, 0x18, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xf, 0x3, 0x8}, 0x10, 0x0, r5}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x400000000000000, 0x33000) 07:28:37 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20007a00) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 565.894132][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 566.034491][T22432] ubi0: attaching mtd0 [ 566.104572][T22432] ubi0: scanning is finished 07:28:37 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$inet6(0xa, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000), 0x1) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x40040, &(0x7f0000000340)={[{@max={'max', 0x3d, 0x2}}], [{@hash}, {@seclabel}, {@euid_lt={'euid<', 0xee00}}, {@obj_role={'obj_role', 0x3d, '$}-,'}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, '\''}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x5a, 0x66, 0x6a, 0x65, 0x34, 0x35, 0x66], 0x2d, [0x35, 0x31, 0x31, 0x66], 0x2d, [0x65, 0x39, 0x37, 0x62], 0x2d, [0x32, 0x35, 0x33, 0x30], 0x2d, [0x36, 0x30, 0x62, 0x61, 0x39, 0x61, 0x66]}}}]}) fcntl$getown(0xffffffffffffffff, 0x9) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000440)='./file1\x00', 0x5db7, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000480)="ff31dcc589de0e5fd7a7e4fe31419530df194318", 0x14, 0x8}, {&(0x7f00000004c0)="6de9bda0d58e023ecf7d78f36c2c39cdcb7b3dbcab195c9e76a26ebd7f8060d003311aa572f796fba4be776740120979a461157605221712d8f8c6c32281333a2275099e5443ca403816de5aae87c584a0267a008a7f062f102dbe414fa0351e5fd15b96fa709dbeb9e927531e8dcb25f2aa7032ac581474bf2284eac3a21504453dcffffef404920bc865e8ca3e66eb0f65d6eecaedfb4bd7037d8bcd93e31903d4c9725361899f9d2b0133c63fcb5de8a47c9778", 0xb5, 0x4}, {&(0x7f0000000580)="121d602cce3b2d06a087b8fcb80599265fa87bebc4f79bf4209b453c21b1e3a16807e9162ff86c00b7a1e11472e6bf", 0x2f, 0x5}, {&(0x7f00000005c0)="68eef0a69dbac340826b865283a962444fc0d77dde758430787500eb85b1e312ce6b005488e0f8ffb6c5d36b7cc04fbb6d05f7a2435515ef56467eb262ea15b48b0fbd346f8e245af089941a54c3fa300874e495be8f67ef2202c74985e7a2cba0fe841b27aa5cf6a5bcaf830cca8287892faa840f0d3aa406cc29774e378317fc88183e73003e4703962230e12a0a18b759f4be409ed321ce4e0f09e2551af6039594dbafd39b425f74d8e2be6df8ded7fd641b8654cb7ce733df68acaf232ced931892288d79b2f8ebdbcc89e6b7", 0xcf, 0x9}], 0x1048, &(0x7f0000000740)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@dax}, {@data_err_abort}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffe}}, {@stripe={'stripe', 0x3d, 0x100}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '*'}}, {@smackfsroot={'smackfsroot', 0x3d, '\\'}}, {@subj_role={'subj_role', 0x3d, 'subj_user'}}, {@obj_type={'obj_type', 0x3d, 'binder\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '\\\\+!--'}}]}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000400)) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) [ 566.401790][T22441] loop2: detected capacity change from 0 to 4096 [ 566.427232][T22432] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 566.470182][T22432] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 566.508889][T22441] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 566.520491][T22432] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 566.588563][T22432] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 566.647027][T22432] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 566.677551][T22432] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 566.685904][T22432] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 566.696590][T22432] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 566.730513][T22441] loop2: detected capacity change from 0 to 4096 [ 566.751018][T22441] EXT4-fs (loop2): Unrecognized mount option "" or missing value [ 566.763150][T22444] ubi0: background thread "ubi_bgt0d" started, PID 22444 [ 566.767395][T22438] ubi0: detaching mtd0 [ 566.781730][T22438] ubi0: mtd0 is detached [ 566.800035][T22432] ubi0: attaching mtd0 [ 566.805486][T22432] ubi0: scanning is finished [ 566.871662][T22432] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 566.891249][T22441] loop2: detected capacity change from 0 to 46 07:28:38 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = dup3(r1, r0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x0, 0x8}, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000620000/0x1000)=nil, 0x1000, 0x1800007, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6d7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x4) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000040008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0800000016e06cccaf7e123a9a17e101e371f9b0972988a8ff336882fa1846c1e09c697e52acea6dceaf04072f47650f67b527f4ba942a8388cea5305dae3df461dbff255e5a0f92c1c22a39cab8908ecc91d4e04cd37f9e4631f3a9ad71f456d60e98b692362008a3f5783a06549f83171dd88712a018be71176fd86533d26495be164a1fc81b2b055e0000f253d165aee14733bf4650ac389c7b9ec3bed0a05dd3c46112cc5a31eaaf00000061ecc67c2bcd00"/192, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f00000002c0)='./file1/file0\x00', 0x0) mount$overlay(0x40000d, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570706572f4e206000000562d6c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e0000000065315c00"]) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) unlink(0x0) pipe(&(0x7f0000000140)) mount(&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='./file1/file0\x00', &(0x7f0000000440)='debugfs\x00', 0x0, &(0x7f0000000480)='/dev/kvm\x00') 07:28:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) socket$inet(0x2, 0x4000000805, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x0, 0x0, 0x100000000}) sendfile(r1, r0, 0x0, 0x7ffff002) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) dup2(r0, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x40, 0x3, 0x3, 0x0, 0x0, 0x44284, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf8, 0x0, @perf_bp={&(0x7f00000000c0), 0x10}, 0x4, 0x1000, 0x200, 0x1, 0xc18f, 0x0, 0x3, 0x0, 0x1ff, 0x0, 0x101}, 0xffffffffffffffff, 0x7, r0, 0x3) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000003070300000000000000000007df00030c0006400000000000000000080005400000000208000540000000000c0002400000000000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x200c011}, 0x8000) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r4 = signalfd(r1, &(0x7f0000000240)={[0x7f]}, 0x8) sendfile(0xffffffffffffffff, r4, &(0x7f0000002300)=0x4, 0x800) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 07:28:38 executing program 5: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x24000, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x200000000d, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xf7, 0x0, 0x3b, 0x3f, 0x0, 0xf87e, 0x84c81, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8}, 0x40, 0x5, 0x3ff, 0x9, 0x9, 0x5, 0x20, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x3) clone3(&(0x7f0000002ac0)={0x20100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000002980)=""/217, &(0x7f0000002a80)=[0x0], 0x1}, 0x58) syz_usb_connect(0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="1201da0054db2a0899041f1086700102000002285f5b000911020200000000000905830300000000000905840200f2327581826d04db9f62ae41e4e96b2b2efd521ce7d26bea92e83894c97b2abc38ddf8afad087b220669f0d4ffe00c1c990bba04d8b19a90b4b58daab3f6acfd691ddd91147a94c69e7895ade0bb696aad18"], 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x3ff}}, './file0\x00'}) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r3, 0x8, 0xffffffffffffffff, 0xa) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800), 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = dup2(r4, r5) read$FUSE(r6, &(0x7f0000000780)={0x2020}, 0x2020) r7 = getpid() clone3(&(0x7f0000000240)={0xe320b00, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000400), {0x5}, &(0x7f0000000440)=""/124, 0x7c, &(0x7f0000002b40)=""/212, &(0x7f0000000140)=[r7, r3, 0x0], 0x3, {r0}}, 0x58) 07:28:38 executing program 4: r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000001c0)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0xd}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000140)=0xb327) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) pidfd_getfd(r5, r6, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001440)={{0x0, 0x400, 0x3, 0xa35, 0x2, 0xffffffffffff7fff, 0x6, 0x4c4f663d, 0x40, 0x7ff, 0x14fa, 0x6, 0x2, 0x8, 0x2}}) syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x0, "a59f7995f969f9"}) r8 = getpgid(0xffffffffffffffff) capget(&(0x7f00000002c0)={0x0, r8}, &(0x7f0000000300)={0x9, 0x2, 0x8, 0x5, 0x10000, 0x3}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x9, 0x0, 0x1, 0x0, 0x4, 0x2080, 0x7, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext, 0x100, 0x1000, 0x9, 0x2, 0x9, 0x100, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 07:28:38 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x2000ad18) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:38 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf939, 0x1f}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000bc0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x8, 0x4, 0xffff, 0x3, 0x6, 0x0, 0x211, 0x38, 0x121, 0x8, 0xe9e3, 0x20, 0x2}, [{0x0, 0x0, 0x800, 0x5, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x7f, 0x0, 0x3ff, 0x0, 0x0, 0x400}], "", ['\x00', '\x00']}, 0x278) munmap(&(0x7f000041a000/0x1000)=nil, 0x1000) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000340)=""/193, 0xc1}], 0x1, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080), 0x13e, 0x8000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) [ 567.146881][T22481] ubi0: attaching mtd0 [ 567.174779][T22481] ubi0: scanning is finished [ 567.489341][ T1134] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 567.559646][T22481] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) 07:28:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x0, 0x205}, 0x20) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="690115a8b2c19e29482c39d9409c0cd3792108b78e122541950383b1e1b2ddd16c4189bd986e4a7223e3c187f0a20015a86fdaf35934aeca9e45919202938ad248ade946900dfd90a77c606cd384b1126da2bec613c837e1afda21e1c74fb64574b41a01efb9b39802198a1aa38c114180c719a62d4225dadfaf4d3ae42d9540d69f331b1ce458a01fba814ef7b9449558125abb", @ANYRESHEX], 0x30}}, 0x40082) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468113c746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x20008000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES16, @ANYRESDEC]) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) io_setup(0x0, &(0x7f0000000100)) connect$ax25(r2, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, [@null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) io_submit(0x0, 0x6, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x9}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0xc586, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="796135b81b24", 0x6}, 0x0]) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x0, 0x20}, 0xc) ftruncate(r2, 0x600004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 567.630857][T22481] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 567.718054][T22481] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 567.750540][T22481] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 567.757236][ T1134] usb 6-1: Using ep0 maxpacket: 8 07:28:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) setrlimit(0xd, &(0x7f0000000040)={0x6, 0x2}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000010d00)="0900030051000100e36b7600800000000010e4070913122c1709504b0100000000000000000000001700000000000000000000000000000000000000000000000000000000000000010000002e00000080020000a0020000002a4c696e7578205544464653000000000000000000000004050000000000000500000002000000010201020102", 0x86, 0x10000}, {&(0x7f0000000140)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011200)="080103002e000100c059080000000000a002000054000000fe", 0x19, 0xa4000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f0000011400)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="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", 0x1e0, 0xb0000}], 0x0, &(0x7f0000013500)) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x145742, 0x0) ftruncate(r1, 0x80006) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) 07:28:39 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000060000000000009300008500000075000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='ext4_es_insert_delayed_block\x00', r2}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000024000b0f00"/20, @ANYRES32=0x0, @ANYBLOB="0000e200ffffffff000000000a000100635420006c00000014522d58a5e6b109200008000800050000000080631e9048691e9bbd087cf243c76a483e77e48e0b6b1ebf6b3140c8"], 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x366d, 0xa2, &(0x7f0000000300)=""/162, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x0, 0xfffffff8}, 0x10}, 0x78) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="85100000feffffff183100c855f1ae00000000000000ecad949bcecc018f8f37eb00000000000000836019ef0e0342763d43ddc9b3bab495ec1ee5acf7bbbd7386e5826441"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x100008, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x85, &(0x7f00000003c0)=""/133, 0x41000, 0x18, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0xf, 0x3, 0x8}, 0x10, 0x0, r4}, 0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x400000000000000, 0x43408) [ 567.773045][T22481] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 567.784596][T22481] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 567.797634][ T1134] usb 6-1: no configurations [ 567.804832][T22481] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 567.810841][ T1134] usb 6-1: can't read configurations, error -22 [ 567.853009][T22481] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 567.913868][T22498] ubi0: background thread "ubi_bgt0d" started, PID 22498 [ 567.922456][T22487] ubi0: detaching mtd0 [ 567.937428][T22487] ubi0: mtd0 is detached [ 567.965413][T22481] ubi0: attaching mtd0 [ 567.973442][T22481] ubi0: scanning is finished [ 568.048791][T22481] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 568.057287][ T1134] usb 6-1: new high-speed USB device number 8 using dummy_hcd 07:28:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x2000ae18) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:39 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0xf, 0x0, 0x0, 0xe, 0x3, 0x1}]}}, &(0x7f0000000340)=""/142, 0x2a, 0x8e, 0x8}, 0x20) clone(0x3201000, &(0x7f00000000c0)="a72a9e0e5b825997940d79935a3350a2a413637ca986fc08a5834008d3b52914c90ff06d57050f7109147ea79d785fdeed327501b7b7931441ff162349196cc819cdb484c5ff345ed65de35f6dedf3e6a54405093d4effd740d87b4eafac7b7194a34db76b83819d86df66e77b6ce7696b9a6b6cb12ab9a905e433b79502e9efe038f041e8fa7d31", &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="376c445974f1a09f48e05ff20e1b82f7191682c79a782a252e20ffdce6") [ 568.297671][ T1134] usb 6-1: Using ep0 maxpacket: 8 07:28:39 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) flistxattr(r1, &(0x7f0000000440)=""/153, 0x99) [ 568.337927][ T1134] usb 6-1: no configurations [ 568.342810][ T1134] usb 6-1: can't read configurations, error -22 [ 568.437577][ T1134] usb usb6-port1: attempt power cycle [ 568.458111][T22520] BPF:[1] Invalid name_offset:15 [ 568.486220][T22522] ubi0: attaching mtd0 [ 568.500608][T22521] BPF:[1] Invalid name_offset:15 [ 568.521418][T22522] ubi0: scanning is finished 07:28:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x26b190bdd9867680, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10001, 0x0, 0x1fff, 0x1000, &(0x7f0000e74000/0x1000)=nil}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41c1, 0x90001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x0, 0xfffffffd, 0x5, 0xab2323e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e9}, 0x0, 0x9, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000862000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000180)="0f082a7fcbea72c0ec1d3629789a672e1e0f20d86635200000000f22d80f79a3863b653ef20faef4ba4200ec640f07", 0x2f}], 0x1, 0x42, &(0x7f00000002c0), 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000480000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x428a3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) set_mempolicy(0x8000, &(0x7f0000000100)=0xfdffffffffffffff, 0x80) clone(0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) mincore(&(0x7f00005f7000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/35) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x4) io_setup(0x4977, &(0x7f00000001c0)) 07:28:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000060000000000009300008500000075000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='ext4_es_insert_delayed_block\x00', r2}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000024000b0f00"/20, @ANYRES32=0x0, @ANYBLOB="0000e200ffffffff000000000a000100635420006c00000014522d58a5e6b109200008000800050000000080631e9048691e9bbd087cf243c76a483e77e48e0b6b1ebf6b3140c8"], 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x366d, 0xa2, &(0x7f0000000300)=""/162, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x0, 0xfffffff8}, 0x10}, 0x78) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="85100000feffffff183100c855f1ae00000000000000ecad949bcecc018f8f37eb00000000000000836019ef0e0342763d43ddc9b3bab495ec1ee5acf7bbbd7386e5826441"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x100008, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x85, &(0x7f00000003c0)=""/133, 0x41000, 0x18, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0xf, 0x3, 0x8}, 0x10, 0x0, r4}, 0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x400000000000000, 0x43408) [ 568.715510][T22535] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 568.790286][T22522] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 568.798566][T22522] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 568.834043][T22522] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 568.862535][T22522] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 568.879901][T22522] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 568.889079][T22541] KVM: debugfs: duplicate directory 22541-4 [ 568.911503][ T1134] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 568.931865][T22522] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 568.959155][T22522] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 568.971250][T22522] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 568.982963][T22549] ubi0: background thread "ubi_bgt0d" started, PID 22549 [ 569.005107][T22526] ubi0: detaching mtd0 [ 569.032243][ T1134] usb 6-1: Using ep0 maxpacket: 8 [ 569.034623][T22526] ubi0: mtd0 is detached [ 569.051850][T22522] ubi0: attaching mtd0 [ 569.085213][T22522] ubi0: scanning is finished [ 569.109183][ T1134] usb 6-1: no configurations [ 569.114928][ T1134] usb 6-1: can't read configurations, error -22 [ 569.153246][T22522] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 569.277059][ T1134] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 569.399208][ T1134] usb 6-1: Using ep0 maxpacket: 8 [ 569.437096][ T1134] usb 6-1: no configurations [ 569.441727][ T1134] usb 6-1: can't read configurations, error -22 [ 569.578547][ T1134] usb usb6-port1: unable to enumerate USB device 07:28:41 executing program 5: memfd_create(&(0x7f0000000040)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\\\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds\xa3\xff\x89>\x84\xa9\x86\x86\xa2F\x90\x93\x98N\x05e\x92Jw\xcec\xce\x9f2\xc8\x02f\x03\am\b\xb4H\x8f\x9e\xa5\x16\x8fa\xff\xb2\"\x8a\x15\x13\xa2\x17%!T\x8b\xa1\xb9-\x13\xf9og\x95\x9dT\xef\xcahw\xf5\xffu\x7fu\xb8*\xd3C\xaf\xc2H\a\x00\x00\x00\x10\xbe0\x8a\xba\x04\x00\x00\x00\x00\x00\x00\x00-\xc2\xe8\xffmv\x15\xa2`z\xaceM\xd6)=JW9\x8f\xe0\x94\xd6\x01\x7f\xa9h\xdf\xf0[wP\x86\x02\xa0R\xf3#\xd8,\xb1I\xf6\x95\xf5\x85x\xd2\x97\xcd\xa2$\xb0\x03u\xc9\xc2}\xcb\xb4\xd5\x1a}\x1a\xc4\xa5\x87\xc4I\x8c\xce\xed\xd1Y\x1752\xd8Y\a\xa7^\xc8\xe8\x9f\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00b\x0e\xf8\xa8\x1a\xa7\xefD\xdd\xa4u\xd0\xf4\x17\xcc\x1fn\x99\\=\xeb\x11\"\xb3:\x86u\xa7\x92\xd1@\v\xae\xd0@/3\xf0\xfa\x9a\x96\xf2\'\xc4b\x19KH\xa7\x1dj\x9c\xfe', 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)) io_submit(r0, 0x20000000000002f6, &(0x7f0000000280)=[&(0x7f0000000240)={0x400000, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000000)="80040400000100000000", 0x2000ff6d}]) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xee00) 07:28:41 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) write(r0, &(0x7f0000000000)="3f000300010004", 0x7) 07:28:41 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) getrlimit(0xd, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x141042, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r3, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], "", ['\x00', '\x00', '\x00', '\x00']}, 0x478) 07:28:41 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x25000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:41 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000060000000000009300008500000075000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='ext4_es_insert_delayed_block\x00', r2}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000024000b0f00"/20, @ANYRES32=0x0, @ANYBLOB="0000e200ffffffff000000000a000100635420006c00000014522d58a5e6b109200008000800050000000080631e9048691e9bbd087cf243c76a483e77e48e0b6b1ebf6b3140c8"], 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x366d, 0xa2, &(0x7f0000000300)=""/162, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x0, 0xfffffff8}, 0x10}, 0x78) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="85100000feffffff183100c855f1ae00000000000000ecad949bcecc018f8f37eb00000000000000836019ef0e0342763d43ddc9b3bab495ec1ee5acf7bbbd7386e5826441"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x100008, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x85, &(0x7f00000003c0)=""/133, 0x41000, 0x18, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0xf, 0x3, 0x8}, 0x10, 0x0, r4}, 0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x400000000000000, 0x43408) 07:28:41 executing program 4: semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x0, 0x1800}, {0x1, 0x0, 0x800}, {0x4, 0x4, 0x800}], 0x3, &(0x7f0000000080)={0x77359400}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) r3 = semget$private(0x0, 0x207, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000001c0)=""/42) r4 = signalfd4(r1, &(0x7f0000000100)={[0x6]}, 0x8, 0x80000) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0) semop(r3, &(0x7f00000000c0)=[{0x1, 0x800, 0x2800}], 0x1) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x20, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x2bb98205) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x802}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 570.169740][T22592] ubi0: attaching mtd0 07:28:41 executing program 3: perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) syz_mount_image$v7(&(0x7f0000002000), &(0x7f00000023c0)='./file0\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000020c0)={0x0, r1, 0x3, 0x100000001, 0x9, 0x80}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_io_uring_setup(0x1, &(0x7f0000002400)={0x0, 0x961e, 0x10, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) read$FUSE(r2, &(0x7f0000004680)={0x2020, 0x0, 0x0}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002dc0)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000002c80), &(0x7f0000002d80)='./file0/file0\x00', 0x0, 0x4000}, 0xee7) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffc, 0x0, 0x6001, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./file0/file0\x00', 0x185842, 0x0) write(r4, &(0x7f0000004200)="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", 0xffe00) [ 570.190201][T22592] ubi0: scanning is finished 07:28:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x10000, &(0x7f0000000200)="25a41b77e68a4a336cc7d253f1d031144cb90e00b820e3c9056568309809869073badf65940cda01e216ce6a8d104557b1e4733013ff15f42353b6a5edc20123b49504475b24107586ee578f0e673f0b294e7a5a30873ea0b5040b16af1fcd6122", &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000280)="ae2765c4fad38475b6868dac29929fd3411a32f367bcefdc2bfdfa574d7b8c76527cef334f69a751eb67e8d5ec6fe981f983efba9c5cee47b4c2af6d51191ed13fc8f7a9e69ddc0f4e822349f319ea0e7f5f") ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x44b, 0xfe, 0x0, {0x0, 0x2}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 07:28:42 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000400)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000040)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f000001b000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x81) syz_io_uring_setup(0x75e7, &(0x7f0000000080)={0x0, 0x497b, 0x4, 0x1, 0x9f}, &(0x7f0000020000/0x4000)=nil, &(0x7f0000026000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x1) socket$l2tp(0x2, 0x2, 0x73) ioctl$KVM_RUN(r3, 0xae80, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) 07:28:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) openat$vcsa(0xffffffffffffff9c, 0x0, 0x34280, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000000000000000008000000", @ANYRES32=r3, @ANYBLOB="0000ed5000000000280012000c00010076657468"], 0x48}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000002480)=@delqdisc={0x184, 0x25, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0x10}, {0xf, 0x3}, {0x9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9d}, @qdisc_kind_options=@q_drr={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x40}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x3f, 0xa0, 0x0, 0x1, 0x2, 0x40, 0x5}}, {0xe, 0x2, [0x6, 0x8000, 0x200, 0x8, 0x1]}}, {{0x1c, 0x1, {0x1, 0x81, 0xfffd, 0x1, 0x0, 0x3, 0x3, 0x4}}, {0xc, 0x2, [0x3, 0x4, 0x5a, 0x8]}}, {{0x1c, 0x1, {0x3f, 0x1, 0x1, 0x0, 0x1, 0x7, 0x7, 0x4}}, {0xc, 0x2, [0x74f, 0x6, 0x2, 0x4]}}, {{0x1c, 0x1, {0x8, 0x1, 0x3ff, 0x7ff, 0x0, 0x3, 0xfffffc01, 0x2}}, {0x8, 0x2, [0x8, 0x6]}}]}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x2, 0x0, 0x0, 0x0, 0x10001, 0xfff, 0x3}}, {0xa, 0x2, [0x100, 0x6f, 0x2]}}, {{0x1c, 0x1, {0xe9, 0xcb, 0x6, 0x7ff, 0x1, 0x7fff, 0x5a, 0x2}}, {0x8, 0x2, [0x8, 0x5]}}, {{0x1c, 0x1, {0x5, 0x5, 0x3, 0x7, 0x2, 0xa2, 0x9, 0x5}}, {0xe, 0x2, [0x5e2a, 0x2, 0xb86b, 0x1f, 0x8]}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x24008000}, 0x48000) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@delchain={0x1fec, 0x65, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {0xfff2}, {0x4, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x2f}, @TCA_CHAIN={0x8, 0xb, 0x8000}, @filter_kind_options=@f_tcindex={{0xc}, {0xc4c, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xa58}, @TCA_TCINDEX_POLICE={0x414, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x3db2, 0xfffffffa, 0xfffffffb, 0x9524, 0x64, 0x0, 0xccec, 0x8, 0x2, 0xba, 0x1f, 0x7ff, 0x5, 0x5ba1, 0xb1f8, 0x0, 0x1000, 0x401, 0x7f, 0x9, 0x5, 0x3, 0xdb5, 0x53, 0x80000000, 0x3ff, 0x38ac, 0x9, 0x10000, 0x3f, 0xfff, 0x5765, 0x8, 0x800, 0x0, 0x7fffffff, 0x7, 0x8, 0x5, 0xffffffff, 0x3f, 0x80000000, 0x5, 0x20, 0x0, 0xfff, 0x9ea, 0x7, 0x7, 0x6, 0x6, 0xffffffff, 0x6, 0x4, 0xf4e, 0x4, 0x401, 0x8, 0x100, 0x61, 0x9, 0x7f, 0x3, 0x8b, 0x7, 0x10001, 0xffff, 0x81, 0x1f, 0x10000, 0x5, 0x2, 0x9, 0x5, 0x7ff, 0x8, 0x6, 0x5, 0x6, 0x8, 0x20, 0x4, 0x0, 0x3, 0x73, 0x3, 0x6, 0x1, 0xd032, 0x7, 0x4, 0x3, 0x1, 0x0, 0xff, 0x1ff, 0x1, 0x6, 0x6544, 0x0, 0x396e, 0x4, 0x48c, 0x1f, 0x7, 0x80000000, 0x3, 0x2, 0xa60, 0x5, 0x2, 0x1, 0x3, 0x3ff, 0x3, 0x0, 0x8000, 0xfffffe00, 0x10000, 0x0, 0x5, 0x83be, 0x100, 0x1, 0xd012, 0x7, 0x3, 0x0, 0x8, 0x8, 0x5, 0x20, 0xc8bb, 0x3ff, 0x2, 0x3, 0x4, 0xf6b, 0x334, 0x4, 0x8, 0x8, 0x4, 0x5, 0x80, 0xffff, 0x0, 0x7, 0x1, 0xff, 0x7, 0xafa2, 0x1f, 0x3, 0x8, 0xfff, 0x2, 0x3, 0x20, 0x5, 0x5, 0xaa3, 0xb54, 0x4, 0x5, 0x5, 0x0, 0x3f, 0xffff3e98, 0x80000000, 0x3, 0x200, 0x3, 0x80, 0xc34, 0x0, 0xffffcb8e, 0x7fffffff, 0x9c6, 0x1, 0x7, 0x1c, 0x8, 0xfffff90a, 0x2, 0x3, 0x0, 0xa18b, 0x0, 0x5, 0xd89, 0x3, 0xdc5, 0x101, 0x7, 0x5, 0x3a4, 0xf223, 0x3f, 0x11, 0x3, 0x0, 0x7fffffff, 0x1, 0x8, 0x5, 0x5, 0x4, 0x8, 0x2, 0x80000001, 0x401, 0x6, 0xd889, 0x400, 0x5, 0x9, 0x1, 0x10001, 0xad, 0x6, 0x0, 0x1, 0x5, 0x101, 0x1, 0x8, 0x401, 0x9, 0x2, 0xff, 0x0, 0x2, 0x3, 0x9, 0x3, 0x6, 0x8000, 0x800, 0x2, 0x2, 0x5, 0x81, 0x2, 0xff, 0x400, 0x9, 0xfffffffd, 0x9, 0xffffff01, 0x3, 0x7fff, 0x4, 0x2, 0x81, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}]}, @TCA_TCINDEX_POLICE={0x82c, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x151e, 0x7, 0x7fffffff, 0x2, 0x7e, 0x8, 0x401, 0x81, 0xea6, 0x81, 0xff, 0xff, 0x0, 0x0, 0xfffffffb, 0x6, 0xe000, 0xb5, 0x9, 0x1ff, 0x40, 0x6, 0x40, 0x0, 0x1, 0x9, 0xcddf, 0xfffffff7, 0x6, 0x6, 0x0, 0x80000001, 0x7, 0x3f, 0x2, 0x4, 0x68f, 0x10001, 0x6, 0x0, 0x0, 0x138, 0x3, 0x0, 0x5, 0x1ff, 0x80000000, 0x5, 0x81, 0x2, 0x0, 0x7, 0x2, 0xfffffeff, 0x8, 0x2, 0xbcba, 0x40, 0x0, 0x81, 0x1, 0x92f, 0xfffffffd, 0x6, 0x7, 0x6e8, 0x3, 0xfffffffe, 0xff, 0x3, 0xa1, 0x989b, 0x4, 0x0, 0x80000001, 0x4, 0x0, 0x80, 0x3f, 0x0, 0x6, 0xb0, 0xc6d8, 0x1, 0x10000, 0xff, 0xfffff801, 0x7, 0x0, 0x2, 0x5ab, 0x9, 0x0, 0x6, 0x8001, 0x100, 0x10001, 0x1, 0x1, 0x3, 0x8, 0x4, 0x0, 0xa776, 0x2, 0x0, 0x1000, 0xe0e, 0x3, 0x800, 0x6, 0x3, 0x200, 0xab0, 0x9f3, 0x0, 0x9, 0x4, 0xe3, 0x1f, 0x2, 0xcb, 0x4c7, 0xffffffff, 0x5, 0x46a, 0x1, 0x2cd, 0x96, 0xffff, 0x7ff, 0x6, 0x20, 0x7, 0x401, 0x5, 0x7f, 0x7, 0xfffffff7, 0x8, 0x3f, 0x0, 0x800, 0xffffffff, 0x100, 0x3f, 0x4, 0x0, 0x7, 0x9, 0x7c, 0x18b, 0x48f, 0x9d2, 0x4, 0x2, 0x566, 0x20, 0x3ff, 0x11, 0x4, 0x800, 0xb2, 0x6, 0x6, 0x3f, 0x10001, 0x81, 0x80000000, 0x7, 0x1, 0xffff, 0x8, 0x31f, 0x1000, 0x1, 0x7ff, 0xffffffff, 0x9, 0x81, 0x5, 0x7fffffff, 0x40, 0x6, 0x5, 0x6, 0x7, 0x41, 0x1, 0x1, 0xe9d, 0x400, 0x9, 0x1, 0x5, 0x100, 0x2, 0x3d, 0x4, 0x9, 0x80000000, 0x6, 0x0, 0x9, 0x1, 0x7fffffff, 0x73b8af7d, 0x0, 0x2800, 0x6, 0x7, 0xffffffdd, 0x4, 0x1, 0x800000, 0x6, 0x10001, 0x5d, 0x7, 0x8, 0x8000, 0xda8a, 0x800, 0xfffffffc, 0xfffffff8, 0x4, 0x3155, 0x79588000, 0xefa, 0x0, 0x0, 0x0, 0x80000001, 0x7fffffff, 0x4, 0x1ff, 0x1, 0x58, 0x2, 0x3, 0x80, 0x0, 0x94, 0x9, 0x696, 0x10001, 0x5, 0x7, 0x4, 0x3, 0x7, 0x2, 0x95, 0x0, 0x2, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xfff, 0x5, 0x6, 0xffff5067, 0x81, 0x4174, 0xb00, 0x5, 0x101, 0x8, 0x6, 0x800, 0x6, 0x1ff, 0x9, 0x800, 0x7fff, 0x7, 0x2662, 0x5, 0x81, 0x3f, 0x7, 0xdc, 0x1000, 0x200, 0xd147, 0x9, 0x200, 0x4, 0x91, 0x80, 0x8000, 0xffffffff, 0x2, 0xfffffffa, 0x8, 0x401, 0x7fffffff, 0x8, 0x100, 0x6, 0x99, 0x1c000000, 0x2c3b, 0x7, 0x17, 0x61, 0x1, 0x9000, 0x3, 0x0, 0x40, 0x6, 0x3ff, 0x2, 0xffffffff, 0x7ff, 0x4, 0x4, 0x56, 0x7, 0x5, 0x6, 0x81, 0xff, 0x10000, 0x10000, 0x80000000, 0x3ff, 0xffffffff, 0x7fffffff, 0x101, 0x1, 0xeb, 0x1607, 0x5, 0x5, 0x5, 0x8, 0x450, 0x0, 0x3f, 0x2, 0x7ff, 0xb1, 0x6, 0x8, 0x7, 0x1, 0x80000001, 0x7fff, 0xff, 0x6, 0x3c16, 0x6, 0x6, 0x2, 0xfffffffe, 0x401, 0xfffffffc, 0x2, 0x7, 0x26, 0x8001, 0x8, 0x5, 0x800, 0x0, 0x2, 0x7, 0xc4, 0x4, 0x4, 0x8f2b, 0x0, 0x400, 0x3b, 0x8b, 0x101000, 0xffffffff, 0x8000, 0x7ff, 0x9, 0x2, 0x3, 0x1ff, 0xffffffff, 0x800, 0xb5a, 0x3ff, 0x0, 0x80, 0x0, 0x8000, 0x5, 0x4, 0x7fffffff, 0x1000, 0x40, 0x80000000, 0x5, 0x8, 0x7, 0x1f, 0x5, 0x100, 0x1fe, 0xfffffffe, 0x6, 0x4, 0x4, 0x3, 0x3f, 0x18, 0x1, 0x7ff, 0x2, 0x3, 0x800, 0x80000000, 0x400, 0x101, 0x8, 0x8000, 0x7, 0x8000, 0x1000, 0x6, 0xfffffff7, 0xef, 0x10000, 0x5, 0x599, 0xb4, 0x101, 0x0, 0x80, 0x3, 0x4, 0x0, 0x7, 0x1, 0x0, 0x8ab, 0x7, 0xffff1080, 0x0, 0x3, 0xa60a, 0x1, 0x6, 0x4, 0x100, 0xd3a, 0x9, 0x0, 0xc4, 0x0, 0x1, 0x3ff, 0x1, 0x3, 0xffffff81, 0x7ff, 0x5, 0x1000, 0x81, 0x8, 0x42, 0x2, 0x5, 0x8001, 0x800, 0x4ac, 0xdea5, 0x9, 0xc4046c0, 0xa9c, 0x80000000, 0x1f, 0x7f, 0x6, 0x8, 0x7f, 0x7, 0x8b, 0x4, 0x7f, 0x5, 0x1, 0x3, 0x7, 0x3, 0xffffdc71, 0x7, 0x9, 0xec, 0x2, 0x3, 0x5, 0xff, 0x7f, 0x7fffffff, 0x2, 0x7, 0x687, 0x9d8, 0x1000, 0xd4, 0x7f, 0x2, 0x10001, 0x8, 0xff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2fb}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xf8}}, @filter_kind_options=@f_matchall={{0xd}, {0x65c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x650, 0x2, [@m_ipt={0xe0, 0x14, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x89, 0x6, "8df71659901dc9ed0b99af016254ac8733c01087e940ee2fc6a913ec95e7f76082c873c1926c252ce1796711f553a0ea2b3867bef26d1ad330c159d8e42942e1f00d09f66ca1ed5d266dc5c06e360432588f81f78e1cee75e4451854d19c089a28ee102caf10f1074504cbbff6fcbf586b1f5306c6c0f8c4100bd94e78b46a10b95ec23c4c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x114, 0x10, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x6, 0xffffffc2, 0xfffffffc}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x1ff, 0x10000000, 0xb7, 0xfff}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x5, 0xffffffffffffffff, 0x0, 0x8}, 0x6d}}]}, {0x94, 0x6, "d9be95453cf35b1dcb8a2abbff41d83ddecceb9408860d50ebf8c4ef9f8a66624c789d2203fc1096ac03e788648115e1cfab76775a6150b7ec3fe9e2f6ee602fccbb3a717d17b7d83f37202c76683eafd60aa38a3680ebb724e535101585c12d15dc5a87242c5e0b29cbf80d0294ca1c498ea728131fca3e4602842933983b51de149a3b1018e904b15a267c5cff0b9b"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ife={0x54, 0xb, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @random="1bb693a82e5e"}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x7, 0x6, "e0e027"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x40, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x134, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x35, 0x6, {0x5, 'nat\x00', 0x15, 0x8, "63a38226e04378b7d3f05f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}]}, {0xcc, 0x6, "78bd5d66414490080f78f20592cb23827d47e44a9923cc9802fd405b234c14d7aa969ef764e393179e8cc45b864c7e8d248c43561db5c4a857e5d4c71f5fa1511222bb6852a45dc9781a875a6d46f73433718eabfa3b3e00493ab5bf7a74aae9835e6a41bef39973e4df93c8de7de78a38c7e3dc722a36578c0d00ce4ce6c650d1d357f845eaab7d083d75a69589e053c37127403c5c9634755440cda18782328098ff7d0dbd68fec08dd7af8d218ea31d2d32c9711c4975df4298b51147010c65492b77f53d4b17"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x104, 0x7, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7fffffff, 0x800, 0x8, 0xff, 0xfff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x7, 0x4, 0xff000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0xfffffff9, 0x4, 0x0, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x859, 0x20000000}}]}, {0x82, 0x6, "358004f61d9c1877cf1abd9181c648e0cde124855cd3e90d0c69d738f048291a220796ae5bf3aa4bf9617d4b1ec0604888945ffe19834492914609d974baa4d249799b2cc675b99a95ca43b537d27c04e03c1256e753ac64a2ff6c2b04ed4570afaaffcaca8c37d22d68828a252aeb59945dd1ff183ead08497041cd2e1f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}, @m_tunnel_key={0x10c, 0x4, 0x0, 0x0, {{0xf}, {0x5c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3fc000, 0x7fffffff, 0x3, 0x5, 0x10001}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0xe0, 0x20000000, 0xffff, 0xd2e}, 0x2}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}]}, {0x82, 0x6, "8f4e0b42c3d25f485339030c05f1f25dd325e6913d120e11a508817913b1ceedffb558770b736ae3f5537ab188c6bdfdd7453eb69a567dd30702dd68b649d54e96512c96f1f406746d7e7baad1f2744dc71fbd917f6ffe63f7168045df754858b5fd37fc747a250fbbcfaaee77cb734d78023d1a0a99a4ef44d98934d594"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x80, 0x3, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4c, 0x6, "a66813290378480f25fb11586daa22dc96837c3638dd70b3a4e4e5c47beab3df9f3c343a9116292685ff5124514a57b104cd596f8aa1aa8fbb2722d5500594b6acb1e451f839b615"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_DIVISOR={0x8, 0x4, 0x3e}, @TCA_U32_MARK={0x10, 0xa, {0xffffffff, 0x7fffffff}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_u32={{0x8}, {0xc98, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xf1}, @TCA_U32_SEL={0x684, 0x5, {0x7, 0x6, 0x87, 0x401, 0x2, 0x4, 0x3, 0x1, [{0xa232, 0x81, 0x6, 0x8000}, {0x5, 0x0, 0x5, 0x401}, {0x7f, 0x3, 0x1, 0x1c67}, {0x6, 0x5492, 0x1000, 0x7}, {0x1, 0x9, 0x3f, 0x101}, {0x2, 0x10001, 0x2, 0x3}, {0x9, 0x2, 0x5, 0x9d02}, {0x5, 0x2, 0x5, 0x5}, {0x7fff, 0xff, 0x6, 0x1ff}, {0x9, 0x10001, 0x0, 0x4}, {0x9, 0x40e, 0xfffffff7, 0x100000}, {0xff, 0x4, 0x80, 0x2}, {0x7, 0x0, 0xff, 0x2}, {0x80, 0x6, 0xee3, 0x401}, {0x1, 0x1f, 0x9}, {0xc3d, 0x4, 0x8, 0x40}, {0x22, 0x8, 0x364, 0x5544}, {0xc5, 0xff, 0x800, 0x6}, {0x80000001, 0x5, 0xfffffffa}, {0xe0, 0x4, 0x0, 0x3}, {0x6, 0x200, 0xfff, 0x3}, {0x0, 0x5, 0x8}, {0xb57, 0x3, 0x7, 0xfff}, {0x7fff, 0x81, 0x2, 0x739}, {0x6, 0x24ff, 0x0, 0xff}, {0x400, 0x5, 0xc0, 0x8}, {0x4, 0x0, 0x5, 0x2}, {0xffffffff, 0x8, 0x7, 0x81}, {0xffffefa4, 0xfffffffb, 0x80000000, 0x7ff}, {0x7, 0x1f, 0x3, 0x620ec678}, {0x800, 0x1000, 0xb335, 0x3}, {0x7, 0x2, 0xfd, 0x8f37}, {0x7, 0x8, 0x1, 0x7}, {0x9, 0x7, 0x7, 0x2}, {0x3, 0x12, 0x64b0, 0x6}, {0x4, 0x7, 0x6, 0x1}, {0x1, 0x8e9f, 0x0, 0x80000001}, {0x7, 0xb0, 0x144a000, 0xffffffff}, {0x6, 0x7fff, 0x7f77, 0x1ff}, {0x7f, 0x5, 0x9, 0x8}, {0x7, 0x8, 0xf, 0x8148}, {0x6, 0x4, 0x400, 0xafc}, {0x3, 0x9a0}, {0x3, 0x6, 0x6, 0x8}, {0x6, 0x4e736cdc, 0x8, 0x1}, {0x7, 0x9, 0x5, 0x63}, {0x7fffffff, 0x0, 0x8, 0x8}, {0x0, 0x0, 0x800, 0x7f}, {0x2, 0x8, 0x80, 0x7fff}, {0x6, 0x7, 0x569, 0x5391}, {0x8, 0x1, 0x0, 0x1}, {0x3bfddf42, 0x9, 0x0, 0x6}, {0x4, 0x1ff, 0xffffff00, 0x10000}, {0x9, 0x2, 0x80, 0x8}, {0x48000000, 0x80000000, 0x5, 0x7}, {0x0, 0x1, 0x80000000, 0x1000}, {0x40, 0x7, 0x25e, 0x7}, {0x20, 0x2308, 0xb3e, 0x9}, {0x6, 0x3, 0x80000000, 0x6}, {0x0, 0x1, 0xff, 0x3ad194ea}, {0x38, 0x3200000, 0x2d5, 0x8001}, {0x7fffffff, 0x6, 0x6, 0x7}, {0x400, 0x1c00, 0x0, 0xcb}, {0x7, 0xa654, 0x7, 0x6a4}, {0x9, 0x6, 0x20, 0x9}, {0x81, 0x4, 0xb2, 0xff}, {0x4, 0x7, 0xd3, 0x400}, {0xd451dc4, 0x6, 0x8000}, {0x3, 0x8, 0x1, 0x6}, {0x4, 0x7, 0x80000001, 0x8}, {0x3e0, 0x6, 0x9, 0x9}, {0x2, 0xfffffffa, 0x7fff, 0x5}, {0x5, 0x8, 0x6}, {0x884, 0x8, 0x7fff, 0x341}, {0x15bd, 0x1f, 0xfffffff7}, {0x400, 0xea, 0x10000, 0x1000}, {0x9, 0x3, 0x6, 0x1}, {0x4, 0x2, 0x5}, {0x0, 0x9ae, 0xffffded0, 0x10001}, {0x20, 0x9, 0xac, 0x4}, {0x41, 0x30dd7d58, 0x10000, 0x9}, {0x2, 0x2, 0x1, 0x6}, {0x0, 0x8, 0x1, 0xb09}, {0x3, 0x30, 0x1, 0xfffffffb}, {0x8001, 0x78, 0x0, 0xff}, {0x98f, 0x3, 0x401, 0xeb}, {0x401, 0x9, 0x4, 0xff}, {0x1480, 0x1, 0x3, 0x2}, {0x8, 0x9, 0x5, 0x14}, {0x0, 0x401, 0xd6ea, 0x2}, {0x200, 0x3, 0x1f, 0x9}, {0x9, 0x2, 0x8, 0x7ff}, {0x4, 0x100, 0x8, 0x5420ab5c}, {0x28, 0x6, 0x7, 0x2}, {0x20, 0x7f, 0x9, 0x8}, {0x1, 0x7ff, 0x9, 0x8}, {0x101, 0x7fffffff, 0x1f, 0x1}, {0x1d, 0x5, 0x40, 0xfffff6d9}, {0x8, 0x1, 0x7, 0x20}, {0x3, 0x4, 0xbd, 0xc77}, {0x2, 0x1, 0xd, 0x7fffffff}, {0x1d, 0x199a, 0x2, 0x1000}, {0x789f, 0x3, 0x400, 0x39}]}}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x3}}, @TCA_U32_POLICE={0x420, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1f}, @TCA_POLICE_RATE={0x404, 0x2, [0xbd7f, 0x2, 0x7f, 0xfff, 0x6, 0x1, 0x0, 0x8, 0x4, 0x6, 0x0, 0x1ff, 0x6, 0x2, 0xe86, 0x7f, 0x5, 0x9, 0x7, 0x1, 0x200, 0x9, 0x4800000, 0x80000001, 0x4, 0x5, 0x2, 0xba4, 0x2, 0x5, 0x80000001, 0x5, 0x2, 0x80, 0x6, 0x80, 0x4, 0x40, 0x2, 0x2, 0x7f1, 0x73a, 0xa0000000, 0x0, 0xfffffc45, 0x0, 0x7f, 0x2, 0x7, 0x4, 0x2, 0x4, 0x3f8000, 0x4, 0x200, 0x401, 0x9, 0x0, 0x80000001, 0x9, 0x2, 0x8, 0xffff, 0x6, 0x0, 0xffffffff, 0x9, 0x1f75c033, 0x401, 0x5096e35c, 0x0, 0x8, 0x2, 0x8, 0x646e0433, 0x3, 0x3, 0x0, 0x1ff, 0x2, 0x8, 0x2, 0x0, 0x101, 0x9, 0x2, 0x8, 0x800, 0xe716, 0x400, 0xf7b9e439, 0x7f, 0x5, 0x1, 0x2, 0x80000001, 0xac25, 0x5615db05, 0xffffffff, 0x2, 0x5, 0x8, 0x6, 0x7, 0x7, 0x81, 0x9, 0x8, 0x0, 0x3, 0x7fffffff, 0x4, 0x2, 0x2, 0x67, 0x1, 0xfffffffd, 0x4, 0x7fffffff, 0xa41b, 0x7, 0x0, 0x0, 0x7fff, 0x1, 0x8f1, 0x7, 0x800, 0x7fffffff, 0xffff0001, 0x9, 0x8, 0x0, 0x91, 0xbe, 0x400, 0x2a83, 0x56d, 0x7, 0x200, 0x0, 0x10000, 0x9, 0x6, 0xa7c, 0x68b6, 0x7f, 0x1, 0x0, 0x4, 0x8, 0xff, 0xffffffff, 0x2, 0xffff, 0x1, 0x80, 0x5, 0x9, 0x2, 0x80, 0x6, 0xfff, 0x0, 0x3ff, 0xc, 0x1, 0x3, 0x7ff, 0x9444, 0x0, 0xad25, 0x20, 0x3ff, 0x101, 0x5, 0x4, 0x8001, 0x3f, 0x4, 0x1, 0x1ff, 0x2, 0x9, 0x20000, 0x0, 0x80000001, 0x0, 0xba84, 0x8001, 0xffc000, 0x8001, 0x4, 0x0, 0x5, 0x0, 0x9, 0xb2c, 0x1ff, 0x3, 0xfffffff7, 0xd154, 0xffffffff, 0x0, 0x999, 0xffff, 0x2, 0x7fffffff, 0x0, 0x2, 0x1c, 0xfff, 0x80000001, 0x3ff, 0x200, 0x0, 0xffffb268, 0x64, 0x6, 0x40, 0xfffffe01, 0x2, 0x5, 0xca, 0x3, 0x5620, 0x9, 0x2, 0x7, 0x1, 0x40, 0x8, 0x7, 0x6, 0x7, 0x1ff, 0x7fff, 0xdc, 0x5, 0xb375, 0x9, 0x5, 0x1000, 0x9, 0x10000, 0x3, 0x80000001, 0x7fff, 0x4, 0x1, 0x9, 0xffffbfd0, 0x4d, 0x3ff, 0xd0f, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffff0f77}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}]}, @TCA_U32_LINK={0x8, 0x3, 0x7}, @TCA_U32_ACT={0x1c8, 0x7, [@m_mirred={0xd0, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0xa3, 0x6, "a8aa0fe60291baf31fabacd1faba27a5132ed74642b47090c81397313b212b6f5445201d53e1379144db307427e911c6b8b10dabba86ad71a3ce4f082bfd35d0920d1e99dbe3e43d37885cba30a4e2e864000a35152d484ac93f6b2b7ebb914e3d190e570e7f9ebc724b3a424e7b61b994deb1f639c6d8c690d9e95b361e5fc96908767cebe3101804c96029c228ba64f721f2b8caf4ebbcc190c62927948e"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0xf4, 0x1c, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}, @TCA_CT_LABELS_MASK={0x14, 0x8, "5aeee3db8aa85acddc9f59913b0ae7ba"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}]}, {0x85, 0x6, "02fc54ec8c7e5390a609cd3941a697fd862b08d49ee124fb183f58e1111dfa8f32a90a1e6d26e04587293095ef7f72497ef6f623549f3d8a14b7001a650553403a818e7018a129a95dc97910da10b390112332bc42764a10cc9f0090dbd77448cfde8c09bd79dd3282c73e33a8735c1babec5c4683f1af65f6a043b8ff755c01db"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x3}]}}]}, 0x1fec}, 0x1, 0x0, 0x0, 0xc1}, 0x40010) [ 571.104002][T22592] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 571.273079][T22597] ubi0: attaching mtd0 [ 571.279223][T22597] ubi0: scanning is finished 07:28:42 executing program 1: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaf, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57e]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xf7) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 571.338176][ T26] audit: type=1800 audit(1638689322.880:40): pid=22612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=14850 res=0 errno=0 [ 571.422073][T22626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:28:43 executing program 3: r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, r0, 0x801, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x17d}, {0x6, 0x11, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0xffff}}]}, 0x100}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r1 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000009c0)=[{&(0x7f0000010000)="90e42e8500000000000001000000000000000000000000000800000000000000f90cac8b044b4fa88bee4b8d3da88dc2000001000000000001000000000000005f42485266535f4d07000000000000000000500000000000001010000000000000000000000000000000000000000000000000010000000000d00000000000000600000000000000010000000000000000100000001000000010000000100000610000000400000000000000000000000000000000000000000000004503000000000000000000000001", 0xca, 0x10000}], 0x0, &(0x7f00000005c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) 07:28:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x2c000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 571.558631][T22597] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:28:43 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40086602, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000060000000000009300008500000075000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='ext4_es_insert_delayed_block\x00', r2}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000024000b0f00"/20, @ANYRES32=0x0, @ANYBLOB="0000e200ffffffff000000000a000100635420006c00000014522d58a5e6b109200008000800050000000080631e9048691e9bbd087cf243c76a483e77e48e0b6b1ebf6b3140c8"], 0x44}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000280)=ANY=[@ANYRES32], 0x0, 0x366d, 0xa2, &(0x7f0000000300)=""/162, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x0, 0xfffffff8}, 0x10}, 0x78) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="85100000feffffff183100c855f1ae00000000000000ecad949bcecc018f8f37eb00000000000000836019ef0e0342763d43ddc9b3bab495ec1ee5acf7bbbd7386e5826441"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x100008, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x85, &(0x7f00000003c0)=""/133, 0x41000, 0x18, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0xf, 0x3, 0x8}, 0x10, 0x0, r4}, 0x78) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x400000000000000, 0x43408) 07:28:43 executing program 3: openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, @default, @rose={'rose', 0x0}, 0x6, 'syz1\x00', @null, 0x81, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendfile(r0, r1, 0x0, 0x4000000000010046) socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x40801, 0x0) r2 = accept4(r1, &(0x7f0000000000)=@tipc=@name, &(0x7f00000000c0)=0x80, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0xf03, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x0) 07:28:43 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f00000000c0)={@loopback, 0x4}) r3 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@mcast2, @local, @loopback, 0xceb8, 0x0, 0x9, 0x400, 0x6, 0x28401d1, r1}) ftruncate(r3, 0x0) accept$alg(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket(0x1, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="580004d09e0c779d00"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100c00200000c0002001f0000001e00000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x58}}, 0x0) [ 571.806302][T22637] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 571.816878][T22658] ubi0: attaching mtd0 [ 571.822301][T22658] ubi0: scanning is finished 07:28:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) listen(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @private1, 0x7f00}, 0x1c) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x3bd9, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x8, 0x24a840) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x401}}, './file0\x00'}) ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, &(0x7f00000000c0)) recvfrom$llc(r3, &(0x7f0000000440)=""/4096, 0x1000, 0x40000000, &(0x7f0000000200)={0x1a, 0x312, 0x7, 0x20, 0xaf, 0x9, @local}, 0x10) [ 571.911757][T22658] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 571.937534][T22658] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 571.960922][T22658] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 572.000842][T22658] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 572.020654][T22658] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 07:28:43 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffff6fff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0), {0x24}, &(0x7f0000000200)=""/144, 0x90, &(0x7f00000002c0)=""/76, &(0x7f0000000340)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x6}, 0x58) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x1, 0x86, 0x7, 0x0, 0x200, 0xd0062, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x8001, 0xfff, 0x20, 0x5, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}, r1, 0x8, r0, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$binfmt_misc(r2, &(0x7f0000000400)={'syz1', "92c950d1397babd2f716050df3389df0a8d4bf18e2cf1078386c9216e96c994f6e244007290f219bd70ce176d6c46c3e9fe354f0b064aea38df45c79e117f480d0ecf66b25714d108fcf4e260598868603268ff78947acafd62ddbfc967ebc6d0a"}, 0x65) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mbind(&(0x7f0000669000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000480)=0x89, 0x36, 0x1) [ 572.065870][T22658] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 572.103632][T22658] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 07:28:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @broadcast}}}, 0x2e) setsockopt$inet_int(r0, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) r3 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005b700)={0x1, [], 0x0, "9f8d31a94194e0"}) perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000340), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x3c}}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3, 0x5, 0x3, 0xff, 0x0, 0x1f, 0x8002c, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200)}, 0x1044, 0x4, 0x61, 0x1, 0x5, 0x10000, 0x400, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xe) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="8000000000007832800000004de400b400680000642f9078ac14141cac14143a44209410000000060000000000000008000001ff0000000700000002000001ff4418121000000a2600000003000000200001000000000003442ced91ac141427000000097f000001000004010a01010200000002ffffffff00000007ac14142700000006443c7731ac1414bb000000097f00000100000000000000000000ffffe00000027fffffffac1e010100a06ab73a00000000000200ffffffff0000f7cf"]}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x1000}, 0x0) [ 572.131592][T22658] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 572.162964][T22677] ubi0: background thread "ubi_bgt0d" started, PID 22677 [ 572.176361][T22665] ubi: mtd0 is already attached to ubi0 07:28:43 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x2e000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 572.562239][T22696] ubi: mtd0 is already attached to ubi0 [ 572.661080][T22696] ubi: mtd0 is already attached to ubi0 07:28:44 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x9, 0x8d}, 0x0) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000140)="1807de4f6cfe062c65cc42bcc1d41c31b752d536096ed3c9af424a41366a07040188f4913efbfe081fa4c1b3cd7d9c59968a1361b4f8bf95b7b90e789a", 0x3d}], 0x1, 0x5) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ptrace$setopts(0x4200, r1, 0x1400000000000000, 0x10002d) ptrace$getregset(0x4204, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {0x0}], 0x0, &(0x7f00000000c0)=ANY=[]) syz_mount_image$ext4(0x0, 0x0, 0x8, 0x0, 0x0, 0x291420, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x10001, 0xc30, 0x800}, 0x0) 07:28:44 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x14001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x200000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, r0, 0x0, 0x3, &(0x7f0000000080)='/+\x00'}, 0x30) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r5 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x204401) r6 = getpid() sched_setscheduler(r6, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x0, 0x0) kcmp(r7, r6, 0x4, r0, r2) ptrace$peekuser(0x3, r6, 0xff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) ioctl$TCSETSF(r4, 0x4c01, 0x0) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) 07:28:44 executing program 1: r0 = open(&(0x7f0000002f80)='./file0\x00', 0x111001, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000002fc0)) r1 = syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000000680)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) syz_mount_image$ufs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000140)="739626535b9fb24b5a90e1b80c54abcf361f6301f8d22ead0e6da38a4e097a3d10b93682144ef3bfa3702eddadb81a5cf1ba15409228a29748786852493e5374cbf6d6d089e53dea4da423561eb25a75d5fef3ef09ab1e9576fb2a7f86096a39e663665561ae094754870909219f60ac3ebf8e4659668015da926defc80e7714daf27622d473eb179196c35e466135fcd569270f6eab43e250627d96783a383e2353e301ea1abfa3926e0ecfb035685ea3a4805fd4ab50bbe925e833c8704b", 0xbf, 0x10000}, {&(0x7f0000000300)="90f9c87f48a49fe78712747b43608eb1d6bbe747323d8cc4653c5dfd8bc8b5f983567bf165a6e560105caada7bd3005c7233e853df7f9e1f0db5f4af7d91109129b2f8a64799cadb418f47425d0af03326a182062c166a6055779bd1c7a1d3f23f0b2772a5043d31bc88e99169f3b112ef20c1c7603e705b2b3695d12b29b22eae64c9f16700fa9ba7cc9a8dbe37d31cfc5cbb6f9ea488fa111d1e5e", 0x9c, 0xaeb}, {&(0x7f0000000080)="6e9ef66806aa20c83daf980c614c766d5f50aa8fba2cf9ea454301ef5fb9a64ebdf68f998196161956ac5e8f0a7e6ad1f5", 0x31, 0x9}, {&(0x7f00000000c0)="b8ed58c8961df4aa9a75ccbffe2e177c2ff963e43c6b1c8f988ddf76061228257c8a3795f7e049cd7e3f2e1101ed54b5b54a6ba17201ecdbbb895420", 0x3c, 0x4}, {&(0x7f00000003c0)="f857be5414b46288d17afce0dfb8655d31f908e6c220c77705dd7bc7713e25cebf4377232da6a3b8943bf7d60c889ad9d662cfd32295605afefc52c399e65c9afee3f4e12e82357795de0625f98f9e291f4dc030903f87944fe1b04c36b985589eefee96a71d1570b9e3c69b7f7ae84f9418d092a1c06d31ce1ff52c70822eacdd14c7c44a74bf1a741e1630e11d272842b71bdbe36e7e582cea1bf81488e020c6e90e0591c9500ac0cf4c549b818dbb6942a9f8fac389ed656a0a7c5403a45182", 0xc1, 0x9}, {&(0x7f0000000240)="5d317cff8ed12ee982481c275f", 0xd, 0x6}, {&(0x7f00000004c0)="21c384806dee5e0a7c3cd74d6ebc5f79a83a571da485c0efc1e25831a434d6603fcd46e02fffb86222d790f27b2fd08ee366b81a3e8fcff88c52d8b56cd364179f834ad46c01a93d4e20c36cf864b226182d284ab6f20be86f231ab5fd1531943da81993a255ab73730a1c73ce7a40b2514abd18814616326df3e871d49269cedbf212f4a411b26716f050e43f295c844c932bb840f1cf6e34c72bcb65696057ac11a49b483a5f695c7d02fd78107d001da4a9d02fe441de2faac936b546e6b804d45c324fb45d1f18152b0642be540eaa267801e28d4a4c75ecf586", 0xdc, 0x8}], 0x2000, &(0x7f0000000980)={[{}, {'&^'}, {'squashfs\x00'}, {'squashfs\x00'}, {'squashfs\x00'}, {'squashfs\x00'}, {'squashfs\x00'}, {':!'}], [{@smackfsroot={'smackfsroot', 0x3d, 'squashfs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\'@/}'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', r2}}]}) r3 = openat2(r1, &(0x7f0000000280)='./file0\x00', &(0x7f0000000880)={0x200c0, 0x28, 0x8}, 0x18) recvmmsg$unix(r3, &(0x7f0000002dc0)=[{{&(0x7f00000008c0)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f0000000b40)=""/100, 0x64}, {&(0x7f0000000bc0)=""/21, 0x15}, {&(0x7f0000000c00)=""/224, 0xe0}, {&(0x7f0000000d00)=""/253, 0xfd}, {&(0x7f0000000e00)=""/16, 0x10}, {&(0x7f0000000e40)=""/95, 0x5f}], 0x7, &(0x7f0000000f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000001040)=@abs, 0x6e, &(0x7f00000021c0)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/195, 0xc3}], 0x2, &(0x7f0000002200)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000002240)=@abs, 0x6e, &(0x7f0000002640)=[{&(0x7f00000022c0)=""/29, 0x1d}, {&(0x7f0000002300)=""/212, 0xd4}, {&(0x7f0000002400)=""/64, 0x40}, {&(0x7f0000002440)=""/205, 0xcd}, {&(0x7f0000002540)=""/236, 0xec}], 0x5}}, {{&(0x7f00000026c0), 0x6e, &(0x7f0000002880)=[{&(0x7f0000002740)=""/149, 0x95}, {&(0x7f0000002800)=""/86, 0x56}], 0x2}}, {{&(0x7f00000028c0), 0x6e, &(0x7f0000002a40)=[{&(0x7f0000002940)=""/34, 0x22}, {&(0x7f0000002980)=""/190, 0xbe}], 0x2, &(0x7f0000002a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000002b00)=@abs, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002b80)=""/37, 0x25}, {&(0x7f0000002bc0)=""/209, 0xd1}], 0x2, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}], 0x6, 0x42, &(0x7f0000002f40)={0x77359400}) 07:28:44 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x2f000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket(0x2a, 0x1, 0x2) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0), &(0x7f0000000300)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000440)={0x5, {{0xa, 0x4e20, 0xc2, @private1, 0x8000}}, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffe963}}}, 0x108) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x1f4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "9cb500e7efddfe01", "984fa1857b765beb0f0eaa4c5bb01fac65e7a1288ea5fc7a009faced7a57106d", "0f7bc51e", "b59a2c1e7331eca1"}, 0x38) connect(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x1, 0x3, 0x2, {0xa, 0x4e22, 0x9, @local, 0x1ff}}}, 0x80) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000280)='\x16\x0e!\xe0\x04\x86P/)D\xce\xc4\xf5\xce.\xd1,7\xe7-\xec\x11\xf4\xc4\xa7j3\x8dJ\x03\xd4\b\x92c*\xa5\xce\x8dl\xc4\x02\x16\x1eo\x1c\xb3SAN\xaf\x19g4\xa0/G\x11\xd5\xfdbx\xfd+\xf4\x03YG\x88c\x9ak\x83\xb2\xb3\t\x13\x87\xc9_Z\xa4!\x82\xe3\xda\xb0\xcf\xe5\xaa\xe5*\xe0J\a\x86=+jk\xc1', 0x0, r2) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x1, 0x7f, 0x81, 0x0, 0x200000091, 0x2, 0x1fb622c61226de32, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000100), 0xa}, 0x10012, 0x2, 0x3135, 0x7, 0x759, 0x9, 0x3e, 0x0, 0x40, 0x0, 0x10001}, 0x0, 0xc, 0xffffffffffffffff, 0x0) sched_getscheduler(0x0) 07:28:44 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x5522, &(0x7f00000002c0)={0x0, 0x86a, 0x1, 0x0, 0xdd}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32, @ANYBLOB="0001000000000000240012000c0001006272696467650000140002000800050001000000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000100)=[{&(0x7f0000001440)="211ce1b45475c3d32c844c5dc1be31667bbdce73fb876a60a0ebbc07d836d55a6b91fc87717cca66892e7173ef0db65856f181cd0131aed4400d5b4504fdca0539dee8d5da42e30c367134f1efd274b0b4ae24d996441c30e7678c6f67fc25e72f4409e2802767dcc7ca86441f0faabab604f8a2c39665b30397db21527fcfc567d490afc8445926256a377ed95e1dbd007f6d00e33da544260c133a7a7a5ae6b06db0238dd8b9a779fea3173038448f75f27d97bf2a5fc4e76073875bb3b13ecf24d123da9f8244488c155e1ef6cbb755dd074f87a9c28bef1377fa17ee4ee30c622a10aec21e8d", 0xe8}, {&(0x7f0000000440)="70d9ed57a36d4190d61cdc3458247a142c39b4765458f330961a6732f9104ea54d0d668464149fc7fa52d2c6270b0ef276f5436f80c595a3ff44299774656c3fd80f91173f71f97af4247e59ab23f8b639d0d45a86fa494b30377649cb3657a1fa61588a64c8660d7fa48ae697fe6e75aad7392f0865e9a50fc8251348d0e67dc02b52462ad578f630779d1e0afc7e3a59e3ad549c0cbfcd0a4d96fb276cb42efea8161dee1dad10ed0b758989f4c14295dd1bee2e6253d416cf9887e347931418a11ff9169607fe90bf94931c294aea136e93b9e3dfec61f51a833a9f19260f845b2df7d345dbd5077a83f64cceb2efdf4cbdf14e6068e57fc8b6f892848bcb187233156ea8d6074016457ae1490b3dbf6b5b1a8d2721985f79167ccfbc2dd30514a2d0f19663c4de39641666a3861fa0dce484b98c6c77de4898812b9ff4c609c41bcbeea0ce84548c90b4e97fbbcaeee38e7c52aeb6a4ad5d0e3fefe0c21c1a4406cc152176c796244b915e791524c5d80540ac81aa1a61f5675e121b4acc3769089faac6345ca0973285b4338ced55f601acb1bcd10067ad4103a7396ef129669905aa8d8d8ccf3bfb6b3b34c8f932fc721b57cd0682eb2fee82bffb28b2326751cca2dd872d6b5bebc86f4ad3037b14c706285aa0e97eb726705ae6af8e0a22194e70e7d78e248c80363e37f44862042bf25ea7d68b9e4cd3a91cb60631c83d697bf1cdcd69c9bd6dfb1e9e98c64693cd19c6db58f99419d0edf4e0ed236ef8afea8f7fa5b8588ad9db632f2fb42eb8c5e19f1567869e7dbca95ef3b9e43e96a79cda9793bbff880a23713e17efdef813fed750cadf3216aa1dfbf95d2ca4db3a32ea933e8cc08a9267636af5ef55cfba5b2408510ce2fe5745a1ac1f62312c5c69554b48a56d33bc8f69200ec1c17bd889653f6933a1ca2ea7eb217265fde60d411eab37c624e606ed279ff0a7c2fec12000f4d9bec44685c7a293d6c25b8b87d7e4bdda8526751685802e71d3896b965a328b8297f5916f349956c7932fce5af1dca151d0611bd5316dd8200872b776b55a2fb5e1dcba87a7a3f266f3f078221a100bb8c39614d55d9dddf99b0ee42c98de45a1e43861455042b2b2b068658ce3b0cdd9e9b929acec163fcb019102b292c97be09bd3dbc579f48a3fb4105bb098267beb6f002274087711e29931fb87f5fd437c1384b5819da8fc0a3061110d81a7ad580bf578918c6707371c97fff5c7590b2c9e06d6066123903efa03f89facf187cc30454714bde827ccc03e16b116f6c2c327ed06b5e72e5ee71786dd46c72934c4bdc0317f1826a7ec60488c6360efd44fe5243325f6cde9bb0bebc8cad64176bb6fe20fd7e440b7b79c9b60cc33588ed83b7b8ed428a1cbfba83c920b412066e8232e2817236825431c89307b0caeada1b97da21f7d6adbca4a6f0bbd2143e7bc851dd826c2dc6bec98f0639479e7168ea3f384969558c68f2c0360b0ce7665730d3f242ab59b16b52ec42f6cb43e50b757a1df9a07d2c6ced524aa50227aa10a0527531103b0e9d2a1b93b4e0e40fc068abbd4cb90bf7d42abd79a7779c3caac46d0f1b19f3b41c350c32f2bd45cffa7ec24c665866c552aa51546e98547ffc38429dfb26a9153456cb3c8da3fc1590d6bae01f073b1a20b0b56e6b38bad897ec2b0f8292626464dc50f99db1d18f413f6d46b4e7a1184d3903c83be4df42d610f70b79a8861c2d911daa623eede92829e6d3a547891601ae9c8f8ca217ea133456f371d3e49af8dbd23141c70808a9989ed5dcf0245da8b4103977199b8e674c69f8490461c5b838c48302cbe161ca580cba39fc855b32e4824773b7837c19cb519090a17c4c99919989abae25af9fd689eae58c30b62aae4fd1f20485690211973771007e0f3ce408c9b60aa523083e6c0aefbb5f516ddc31adb555e1af8c09c9e9131696db919508f033355be65afe4a81642f452eef12bb64f12dba235e96115d1b27cc63756bba7c7d9b301289a965fee58a7f4d00755c8636101baadc90e8d220a6784933c3d06dedbb0ce2a9d02783195d2233176afd61d1a83cb70ff096f66f7b68148a06a8f324a185820cc67e67619bd199fbddc097a521575aac3c8e581f83da05d205800790ec0e341c8204b241f4c9c30c6139a69db46a444485abb6c75f6aa313bd3cd67f7606e08cb98f9c47a5d30d8666e5412066d34d28b8890a287e07f0d4fcaa9f0aa93060ffc1743ed31ace3bf72d5aba3dbdb48431c2b91b5d2c0e94f7f3415782ccff6f7499ebc93f47be3aa3d3d4c4abca3920eb5a1bee670d821e2afcd27ae543c75a89bb42134268a2ffde51cb140d1a9ba3172ef09d2cbdd0a081db65a2204512c598d8a40afd88542940c7a66f7ea54550b2dc1ea71f10990c772c1901771a2fec13785e258b3cae5c63e13d77d579f7b7b706ef42ad1d013e68239de02f17683735c24cfd4ed640babedb6b179b792171ca5f54798e1aa115e0c70a5e3ba136e821671cad5f4a9e0ab68773eb405bc4a61047818754a4592eaf6d6ac7687f33ab73b1cc509e7867a7dc278578bb4eb8ecf183b50934ddb200ae941157801e500b770f8c3e41b184099f618c37312283439546b4f602b7b5b707d95e9c8135c65e2cc098961b8189b749083cb8712e4b56abde8234cd911d76636866e7808d3c0388f81445daec58b502ad34462268cfd115db5bd2b4beb54c8167db76b232ca2b89a109e6296d640b5ed1bd57b6a5ae14d73010251b7b87811d49915c7a23c84d9f2ed6fe527e7206e8b8d9ce5768b9bbe5ed51614c12183fe17ce170bd316042a601884361e23bf05123888f1dd93ac6cd472f68151b39b6267957e8b2db9bab1b305e49f40d67b18b4d5d407e475c03790a393d43d793c1ce96f551a64d3e6e7647daaad476e770899cdf4c7f953633ac0aa83bcc068cf1be851aaa2a30d0c5b37feb26951667adee6f3bb678d7690c380557abb22bb7560f2f792d234f66afd5aa0906eacc7ac228417ffc50eb8a1ad3d8776fe57624ad7485deac3e881ec8003b7ad9daa0ae93dd58b9974e53da54bc11f24cc3d2ed3da1ad3c4eff62d9bfa29a1a2efd72fabc69ec22192466c6fbfe42bc571228025c0e90293014a60512aeb2f94f6cd9a63b64f21e3d26b354b3a7ab0d4e0bd48c9cf3bb23bf122eb3437737f0a3d9ef11e691bc80ee9b58e48771a69eb4f14292cddbb6c5a8d4209ed3af71522ce079447a8dcce8d69df82c5e7729d77d6a8d09deeda45ec46a9e336f8bd73fc479f22407b30c1edadbae04e575558a77b7e5b54f94178cfe53d7cc6c05f907f7020cb14bcd29acb6234ba29b1517e97931362c5874f8cd6767bfcf9a6354a2a6f640367ded731ab978e7f586f767215dbb43fb2a2f9318e86b94870dcca02915d85d2e00c4f9fe99fae765104bc534bfb78ca14d27fea039a59e6f5154484043fe47ec8caf3dd47d6172b66f0667802ce6a339f285c888a35efab4e3cc86d8d7e89bef4b543b58aa6e600cb0f130e7b6e07a4009a3cbd99eca52b6edabbbf0e83a64998f4a38015627d20fc92ec30ab5628f3b935e7d33431155846e287b8cb822655de19f890e7c4e72356603bf966da8780a51c41f29530a5645bb7d5e2839ebec83f287b762b63d244a194cdd387be682321574947ccc0c4be0bae6fda8fc69f3e606631ca69ad79eae99b335511d023bc2d7c525026f81bee6cdcb7351ed7698f7b7a5c2394bbeb3c348a4ac91f68e8a11f504e2d4c106a7467bced20205d492b474b70edf887d91d8331874dbf51c654eec85efa428cacbad288036ebc9c61f3a8fbc53b519111eaa9756abe3f26fb5adebbc185af7ccc8228c191f7e7af96175524405b4d98ed90588cc33f6ce4e0d3963d132e787227d380cec6c1ac2579f1e2d625d5327f294a7730f9df8c4bb27924b3c7676f0b90191b26338f208385d4ba57f708657b9d84172a0e4d29ee024c16c71c8b923225384d4290d0ef3374ea36f53d25c40165f19fd667a9c341e687987adbb7674d4e067b1413d81126af868c3d205731814e0c3525185b29a3efcb1b1bd38b57abb66724e0b0562418646b640a4adfb9057ae0d6df7a2e0cc6a8077d55bf486a3d9e2134f1fe4610be8b281c50113bdb06f0b9cbbc14949c9fb89d2489c340d23604a0dde2c106bde01ddb11c063295c7647d66c23069b02d0ff277af8889cb1cd8d0b90dfbf952ea32a6339b6ec6d1c3efb24f29f34a6d29bee48b94e55cee206e15d6c238e559df1b7c0e0e6ddfccd26e978d83d2211bc25f08ec461c029708c651e5fbbb4fe1f70ca7a4317910f3e8736f70a819e355d8bb625fc16df823d5426ecc0e0979ccbb2adf602597ca6327932f04861510b3ef7d8758473b3d7116a2cd4cb5a96752d698a7f7c3cfbf01ae46d4b996845bf2e3a1969bc7310558946da94efbddde3dd50f9cde513acbb503fce0dc860d91730ab990a87a6fce00f5f6ad697abc1fdccca8fe730f9cbeaab3c8240b602c5850578e1ad806698defc9fc5fb673b97a35a3cdd190456542ced4c20ed3b1137d2d7e19c4b57641089217865b3b2245824726c607ba1d61b1c589c09c196daa8defe174449b387e3397d86b262e0dfbf54041bc735932a3c4e56bc23648ff3704da76446a5893ee01f897ae1bb01dbabdfae1d1899898a9c11bb82760f93ca7af4241acba836049c408b0a095fb89b7885e4f3a20c493c722d1b2be47f78841f0380ac8643331588f4185a4cb3bf0f22fe30b7e8ba4baa49e6573bb5a304c53a22c1dfe2ae3244a46afcaafd8871ccf76642b30ed3c1b37b76d026cbf1bffe0b06d2df9c0f94019f3fed76781c505830c84aa595cf00c5ccc1e1755009adff55853eb35128620cb03338fa43fe55cadad6acb5fe6deaa1bdc9604babfa207f96c1474908f835d7e2acd8a4b345cdec675ceb3b4c0155a243ca8f9c583b932d5264eb1b74ded0611f855af7be3db29421b89c893f619ac5c3be3f6d407e1ff5735cf4bdb8ebbf576a0e845a5c014750fa2e2dc53f5865ed673d95d1504ede0876aeb0ad45939112264ede488d07ee5260a9984f7d045e2371b87e872ffbfeec424b21d33c5c5b9f0a5434fc8951a206dabdf5386d66291112561b02d324f0e220de232045ac1c0bd3b973bd59155fb9c35a938b5a25c5c353e2f132a1070a100254f2f8d80aeaa136b9cbf6128cd1569ad6b97fd69e6911a8d1b82067c07da1636fc0221a1a43b49cde2c0e491c64447583eec832ce655dfccb17a645dc669b890810c51ebae1fbf6470f3adf9bb7fe6373114117ed0ce19232eba7b17ba6a70397078446d3a85283522afa73f0e7552a1e2e7b03a4d79c4ccbc2dd387440781927307e36c0c732a3bf5e0469a7bab699ce98d1d6bd421384585ba54898137f23d10fc91097bd767689b5fb850372372de91a1028e76aac2f7feae80a23e296315ec0dd98318b425cef3f31ea10dbbe414666e808cf8697ed601158611845135481213cddf6a409309cd0fdbdd4ff9cc1cffc3cbacf36b81d8e3beacceddfdaade8745e34902a6204dfedfb915aa38396e748950522475cce51e4b0768b10f15a1b833fc209b4f106c12c04d327cfa09f9426a8dd66c48c9af319e1b24de29f673762d077641209c8f875152fb7a95d01cbbc1f99e06e5c71c66ddb2c9f99c2053553ae50abefab2080a963c302d4d66f4e3c9d544799741465c77b0321ef3dda69d280a465b188cf84c605db8d3e1a4ec5dc2fec216285fc04", 0x1000}], 0x2, &(0x7f0000000100)}], 0x1, 0x0) [ 573.367842][T22722] loop1: detected capacity change from 0 to 264192 07:28:44 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x80, 0x7e, 0x90, 0x40, 0xc45, 0x610a, 0xfd92, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0x61, 0x44}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000001380)=ANY=[@ANYBLOB="00003900000012"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 573.431314][T22722] SQUASHFS error: zlib decompression failed, data probably corrupt [ 573.472833][T22729] ubi: mtd0 is already attached to ubi0 [ 573.480843][T22722] SQUASHFS error: Failed to read block 0x9b: -5 [ 573.589155][T22733] loop5: detected capacity change from 0 to 4096 [ 573.644223][T22722] SQUASHFS error: Unable to read metadata cache entry [99] [ 573.713383][T22722] SQUASHFS error: Unable to read inode 0x126 [ 573.774029][T22729] ubi: mtd0 is already attached to ubi0 [ 573.775191][T22733] EXT4-fs (loop5): Unrecognized mount option " " or missing value 07:28:45 executing program 2: epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x20000000}) fcntl$dupfd(r0, 0x0, r1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @broadcast}}}, 0x2e) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000400), 0x4) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x5, 0x6, 0x2, 0x7, 0x0, 0x9, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x2}, 0x0, 0xcd, 0x0, 0x2, 0x80000000, 0x9, 0x8, 0x0, 0xc6f, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x8) setsockopt$inet_int(r3, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) r4 = socket$inet(0x2, 0x3, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000)=0x10001, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 07:28:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x60000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 573.894563][T22732] loop1: detected capacity change from 0 to 264192 [ 573.901262][T22733] loop5: detected capacity change from 0 to 4096 [ 573.956225][T22732] squashfs: Unknown parameter '¸íXÈ–ôªšuÌ¿þ.|/ùcä0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) recvmmsg(r1, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004ac0)=""/206, 0xce}}], 0x1, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/233, 0xe9}}], 0x1, 0x122, 0x0) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(r3, &(0x7f0000005840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)=""/102, 0x66}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/172, 0xac}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005040)=""/128, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005540)=""/112, 0x70}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=""/227, 0xe3}}], 0x5, 0x2002, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) sendmmsg$alg(r0, &(0x7f00000040c0)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000340)="90901206db8271904119ff3e597dc46ce68a9fc989fa1412e4c3171df22daeef308e88cb4f268c3702d7e715d6ee07042481b5a456a2e213bad5a469557b6df95fcb740b35eda0b0bed49f5b3b544f5e7aa022f2490db67ff49e398785c7f9cde0eb99d5e6f348bf99c6b56d1b3462b0ad47a2b97bb259c7b39e86c5cf744ca3b4a8530f737b44d1eab0358e00afac77940153f74c355501b0cd6c2badc9474d7de26c603476536fc750c680681e81b0ecb25895f67dd981c2b8eb5ed1f00d64103f065b9b1ffd53aeb93406931e50a34dff5f5a7fe00a28eda13323b1dbbb3cf8054dada486d4add2e8ec53e1ad04b26a63a9aa", 0xf4}, {&(0x7f0000000280)="302ab957e426798768c76742bdaf745b768f3f350fe77997049e25a31b95880dab4ac14fb0bbbe955fbdfc52663457bbd43fdf1fa3f7c9ad45dae3bdaaab22b38d1beaa2e36e05e80af97630e3b98964f6040c4f329d396071d8780facfc9a78", 0x60}, {&(0x7f0000000440)="42196d04b7ccc95e5e8fe452ee46982672c97f825d6b442def91a9e199cd99b408ead24511b077f53ad9a737ef22cbf805c165454484d9c341a8960c664b8eceb0ef5ea2dc329f31a9591ca4cc2c0c71560fcf40d898f791690aa5de0b46378dc7f644a537888f3c1f579c22e3a6c37e7abf7b03a7603a4748742e65ce409ef0ef9f0d981fd897df3d5a5888ffafe9a16eb0bf0a71464f59ba456d3a3d8dbb4b831e2c07d87e9c58a9115721049ba778803b099604cb7c151fa637e6c538ca605330d61b1f15ffb0132488", 0xcb}, {&(0x7f0000000540)="6366478b86b32f3bae81d4667c0f2c6b35d0c835903e3448817ffc2974d9a07dfef9ce27893740be99abad5be9623a65f3be0f94ce142df101ea7eea2f6d2bb9a2400a9c9632709e566928e789f965d309af4464f62d728dfaccf83fb736199ba481caded9d94a35312c9a907c8a4ba9f870615a3cd3", 0x76}, {&(0x7f00000005c0)="4ece769536bd251f2e2aec43ad0156d2c123f366d323c0cb45f9dbd7c80db984906750feee9ea40cecfae22aa756e4d032f69a09f5ea97454a444a34c7a65c088d56bcf07236b9f1d37ff04eba10b4", 0x4f}, {&(0x7f0000000640)="8a90ad89af7c56cc1b7a0657ef28bcbaeebbc0a905de81cceb3caeb8c531f4ee9f8f31a3c65493d7512c17fb140a8271bac5353974f1ff66e74e26bf6c145e0a9305930145179689f86642ef2740fb2f79ed50bcff532224aae295f09fac2b2a5b18d509ca3656def5a0119f0826dc695dcf44d9caa429cdf60e6519cb16a50613723c19767af1f0c55b2c912e9aa9d05c3f45cda5b229533b2ea4724d71b777a4616bc33486466539e3c1e444ac610f531ae08050b648a2ff939d45171b5efacb110dbffdf0624798f1fb7acbb530500846551abbe73d", 0xd7}, {&(0x7f0000000740)="343452e77421103198bb385915d7cd283c57cdd90a0b9ed2f917b58f4a0ba98f784c7f204936ecc856bec588a2c3dd922becafe58344f42f5cda9521d2659b5b539f4e8091c660cdc707e193a577109174374801504b8ac272d76645cf53", 0x5e}, {&(0x7f00000007c0)="77355c53f7a0209476d864e19e747f6eff574c52b9621b0542ebe685464902d7883e81fb419db32add784ad74051b2bb138cf7553c827c1d71b142b792e88ca5dc1c1e4682a043957da32af759a3122d7b187c2ac98fedcab37cdcc17d76788a6740b06f0f4c6c6bb003757b5fe47a63ecf4cd6de1ec7e01e9c22e546eee7024807df059bdf9b65545740ec5dd7013c18e470299492a383cc6623efbffdeca6299d134dd18da01ab28236b2ca205a6d1c22f1edfb3d9474b345fb923f3b1a7727289fa739b88281da31026f1a5477dce1c9cceee", 0xd4}, {&(0x7f00000008c0)="857bddf3b28f078b9482bf700977abc7531da6db1bae3c64680c24dfe7e1c54f6b6c14ce8e88a2b7e859077af7eb557fac091cb0891a871afb307fc3b20fe713564d68ace3d1ec2f8f22d94223dd4a10a4b4be41b3a0c1505ac7b1fa3ce9fc5e5d30bbf916c37dff6a804481e6f4cbb31fe4c6441a09beff87bae69e8f0147d67d096fa291dea7cad29a907786bdcf22ee0fca1266b9e4b867b2a83ce0e8fc9c286a0425992542796a029820f7c8fac188cc20180d4a0f000f2ca65a59b78d3e8f1fea9ddbbcebd62c8da4ec09adbb6652b241542fc15a0b5c91337a043a5720cf51db4dbe68d0a9191e33e7968414450b80baa61e5cd6738bb61eeb0ac7b569a96d5958c8f138e5c2e537fac9bad1dae3836c3f3b4b8002065f38f0c112bd00e10f05e4ea940d7198baf39901f8135e0aa3c629a65bb0de0fb533118695bd4e97629967bc33a900677b50c9f99ed83ed11bd50b6fc164181c3f085d86170ca7eb3ad691a64efc14f0a94742c19db6c4653ec361712754f136b28195cd71b63e8b862995976d5e9277bd163a963021dc4d556d5140065e15c929e6e331e9d8d465d9f65059afbcbb41a634a37d7d9c277aa0b5dc66ead7fd8cf7faee5c7a441733390fd7aaf6d7b4dc2c4beddcfafa22bc3349e2f77fcf18524509ceb6999a851ace8f02d1a639e5729c42a38a51a6c3d1d3c656ada3e233960eeba0c88203162fcdae0f140dcdfaf309a678a8037d0baf1e7b1f353904fa7309e7d144f3f20ea145c2683e1a16e39cd79415089b146928057a3286f03bde33c8d9d34cdb3f5f926a5de91c5703225098afa7ac0fbedaf2a7888a0c04b0771c03493f89c5c25dbaaf0e889b774df89adcaf12d431de5fc59116f240e3b3652114882e2487ec2230790d51e914df3c4b3d2d798022f06348a737b3af1f8859c3f680c8497e437729b60251222d35ed38a36b09c07cfa7d89231aa9f11a001782f2a1718c7adcf958369acc9fe4e9427dd179e0e2282e64fcf97e29e169f55f6ec3cadbee24d1782b2cd5dbc19e49a1b2e2bd908c85bb8995e4e1f6bcb55fa1981bd8228b87edcf2dd6f9607cef1c4d362f2ee368c2448be24fe5bc5a230ddd279a64002f35420d2a99bb57db200f318718f6f17fff5a45c1e29af12999257274d051985060bce4ba0453399a579955fd67af705861204bdf4c117c46f3ca8fd96f83b96e627867484bff517b45e9735d54fe12f95aa0a5e126ee4ad31b795358d2cc70249231c06eca7500874d544c1f15ad892738e5f7c6f6a3b3ad99f2eef27e4fb40f3d7188c5e10ef4e7591fefd414bf7a6721bc1492ffc171138745522c4000f121cd23e5b85fb5c1f8ed2ff0c0ca35630e433e41381c970cf3f4d620f5ff6646519967b9eb268e16973ffb6c1c84fd610b0f001ece997d16e11fb412ca98c5ef79655921628b353aa67971a048ccbe56a028ae6870e3b25f4a54eca844301d8b5eadda77c5f12790b231d8ea09728740fa2a57fe40747bb3d6ab38627790e6ac8a1a85741350e46b98637f980fb673dbe9f7238db7815b00dc7c8a3063e80777f35c784f188d5c268914edbe9880e72cbdec6d2786c46b358a803f5c7c45264206ec6841eba38f2d64e9ff162aece8d50c39fc5ac5e9fcfcf0c22c8714f9e9fa646797786224e0bf0bb0bc4387a225fbc3ce18632f4d6c1bf898d13cf21e5448402a7f76c3a1875de86080e02edc53d523ff2ce877cf52f5a4ac52500448f95aebfb666fbb456e8120d331215d2379e66842fcaf6123d93e351f99bf639c4d47df4e862ad5d0eaa044160decb635a2866b73e3e2447d352655a690f493e93e4bd07c21079f0aaf524334966a7abe11ffb38c12d671441b08f9a89046add44e7565cba2832b164f3c511f4ceb443520733146a31a59f447a121f70517b3e7d9ff62d7c65163b0e1d7eff8cac05f92cc703937e75a9ffe49b64a97f11458fd80176100f998c1411b47559ab2c6747236a642603129238695b8c7895c73e67c853935c81db75f182396538a1829eec369415b85b276c573a027b2d53f95b20b5c935e3b3660af2f9ee860e10b2e90f1314ea3e0cf609db2eb5b7962b3d9b2fa4d786855bf9bb3edd0d942f9f87266b2d22092d1f22d665ef91b1a13c2239facd78824dacac1917017c198550e6dd42316b4689c6319299741fd278a693a2db627c3538f599b42fa3f2e13849650bec84d4c8f0fbe5a233717a24619548c69e00463991b46fefc005ab247f514accbab35598466ea701ca82d305c063216840a259ad88b6706a68e2fed1a93984de3713e79271140373415102c2cdca10ef17c1d2a1e13afad4cc68efce72281fa87e03d7a41b9ff3a0d3cf5f2f28efc2a575b1fc0c0c7d4457a08f12d1c46216b2a5a576f305955d438ba18ff13debb7c12f63b5d9dd4d5ca04219a2a3ba094d8169a371a80cc63bc251a6429699f3e8773b733373a0c21bb042ce050457879dec59bcf59b164b08585afe9c19c6e810d6b4fad37872a495551471e04ccd65749c6c4a89a573c3dfa0ffd8b0f596991018c286c56dee71227bbb1f42a5ea86a9716818c4bc37f77d06b95efe3da66d59b99b7233848f67e79a091b83776773bb2afe3c66da595caa722d63e90d1e0b5784918f215a80b90bf400748714769f2e84b2690910ebb6eac84dcb48493aa872b3721bc0ef64918e042e3675461c3471bcd027cd1b731ea21f168ce88a478692fcfd556a346e33d2a505d7946113e7a406078cf500664e22e3ac1a91325215dd4530359ba46f7abb9851a9208f8dd9e1a0ede677494852e74c84ed7e4c12db5ecd696b1991a7a6524fe4062b9c31b66b3faa95d75976c35454199e5a8d9a1eb5f5a4bd40522ce1c0f9da8463d4bb49870d1d59108bc39a00fc9f16ed1da0c6c0a54225807d68d9dec29aee6ebf1649722f2bd760f37ae48afd9a70d6d8d12811d9164f9f5a0831b2abd3b6e32ddd2d83b4e6cd8b5093b23e5d799add34b389ada5f866beb4770575b173a97d6e5e04e899c60cd5ab10b25ba56820570fcb1a3209f73eae4206757b1a6c30ac80929fb46f4846e4c1db4a33c175986ae6eb64fb1fcd16515ecfd2fe6214c1a167db92434da042fda0930545ad27d8ed54d4454fe4b8512a7dc6d6b89bc69aec4a6bd6e4146917d80cc872edfce9547bee59aec8f972c09858844337b3a574abf0643273ccd1411f35319b47261f3325448bf46bd0f196a1e3d6cb2b04d33c701eefb0d15bab2ba055f78a355cab6a75a1b0730aa660c322edd9204a430631caa716ee582a48c3cd9d43949c2078ed74f8b2fec0bd926f4b11c586a4cdcbaf752e506f047b861bdaa5a5008a0daa7fc0aa15ee0448afba45fdf5390742cf69e79a9a282619f0821c327846b6659a349f14076e2dbb108b7ab42c332e06b4aac63196648baa12bbeae639838c24695a7e42edec495fe17bdb7429c2e43cdd091fc25a969fe94c33f0babb7a551bd60dcecf733316e4ccc19d7e699ef94611befd53e402ca025dc1620634b19ef6570ed426f2ee8a563039f73c9e56771c336eaa9822db5b99214fec0b6736624e409dfee376f72f61223b757d6904304cfda3a4493c200a635de6a7083209aec72f747ec224ccf6019136d01fc0a31286f5cbfa038ba213e88cd81c7b40b06ccf30847ddd7275bbb1956255753395e480269489a6bf1e2e6b5379c8c1e529eace6c262d0f4d1664b928c67e0797660a64821e548be39ceb11a1b046199806259669bc7798616acd783f80ff750c4719414408f3b55d899d4992818ee5a8b730c8778b73a759a83da1e9a215e327fc3f6feb4c884b706191202d7ccc6f2658106dd7aa3dc35c083c88400ae867b0213bd8b5437c1cd46bccece1a27cbe30b534616678cec87e260cc1410c03787bafcc0b27039f66b6b75dd2ad24fbd286d217eca4ae4585fd1deb28bf72aebbee6598771ff205da85ca44cfb42fec1882aea16825db08788e8c14b2b478547deeea9565520bceea9918d16f196943a882bea00beb71ba53a254ab96b91530a0ce78741243dc74e21ff6429cf2a49787007abbf3b35be9059b1aef1001f56daf8d002ece0adc350cc01e720fe4c91c6591ccb2a5df07b004feee335bd4d4ae1f39d2592bc834539e76b985063c0d1e3319a877822eb8f1a6a41e373fb8ed93447c5d850c67fca9d4066e23c3cdc457baf3b1f9d9dfbbf69e2974ba40ea636ac1983daaefc7cf44c7eb72123d0a6c3d50be6686d60d5467738af216ed685c6698e15ebbf90c3caa552cf9c02f8d2be24cfc07d43555a5567d5300173f4e789915956b1ef4f5b470901c8cf7275ca02d5a2633817e84deb1790dacaf1181519e45a77bf4c327133eec7b589e6274268e892f8de0fc743632b1c9236f119910a5e1ff09cad37a8609dd2f0dedccd69520a7d720c6b4b042cffbe93f5764c87822008b40b7b99757952535957e4cf6a90d9fa93bc74e42799e69d9c6100336b4d8ed08a453a871d90b4bb712d6c033e15ffedf96a189b04601d604327b1a68918241c8fe28ae26a85fb0c4d2899aa981af786e571be122850be6ea6b174c8a3bcbef110e168bf83437da3b14865bf1207d02c7cdc4149c3f57a632a8ea51bdf9e149a7c7b7dadf0109b4fd184ba96ee7420f50221733848fd4040d6a9bb9d1931f0a393b67cf81ede0c6eee43034ac1ae7cf7db5c8f6af2377cca8590547223517ed8b620c36c1f0fb85e4da8990b3fe0fcf0aebdd6b3be5dbad128819df6e87af0a38eb89180003ace97926f61c3684e32cb416f67f71b01bf6eb0a26ad4f75410f0d7fa7e6a6b62d55b62dff1b84a480a4bf3cb8dd949fd023a14a5832b55b16ec8a4e91295a01543772bb25396c7a5d6baba8b03f2a3c2cbd9052a98fe564921e7743b8e566252821cc46cf6dcf001882cc84e1ebfa1fbdfacbb3e28b8017213c889d1516cd5791cc055c7afc05a6916dabc3a3f583a84936c87e606b20af3fa6d520e99c48ffddde6fb7bf266ecc3cfae21f59e693d0b7bdd33457f496f23bbe5cd52e8f202e53ea62212e597e294e12bc3305477b788c1a4b99251a9816dc8ffd289580b5e3fb633eba861fa36f85d6541238199b297486880bb7e1fd1a96f12dc6e4e997e64b08a6e2a796fb40c49b021d10eebd5680fff980663494dfaa8897d30bec33f2502883e231735d6ccf77328eee2cb5683f2af2653f806d22fa3820a3ffdff0d38c4b7c3facdc5943e4366a6b3b156f8cc32d5ae1ccbe4a026c5c65768c2ac524094bcb8e2f7025060c694f3e0869383621015123bb87d5e100a3d3744e89439f34e38049f0e9249da6ca685feb57906bc17b82155fb1b0ee83aa01ff7c25ce9ef3f049af3e944c709e0f4d86aa99d25ad5d200dad227b7e11e05f91acd809ee3917c805cdef186367aaa1578c651042c154e55896db8954a085f10d2cefd7ba352c72ec1f5264b1529a44dc13d31c01d8a2e0c291c341984a93dae1bed171aa4de71aec3b516d93f29e71344fa69697bea4873429c792a1a5b0dd669dc92cc9e1d6fe439b5124f7caf283e50c9ab0fbbbf0881992953b8755a4ad94ec5a02db0fe14057c05f38e6cf1f523fe1f2bc5dc809ec3960f1b53f84e1d21f3733b290c763c5440fe03433d3f10635be60dead12af455f22b6ee5661519d8f714bf1f558bd73f503f403c6685bfe09c51e32913c2d63dd87cb6444b8a310909793568f4933426a74ecc3c1e4a3f52c23e9651eb5c8452f33f2408de9f0552f67c1", 0x1000}], 0x9, &(0x7f0000002a80)=[@iv={0xa0, 0x117, 0x2, 0x8c, "0489127c073da9aeaf6b7904cde5d2072d86f18a76303373a8f83a8a5f81a9ac085736f26a7b422b4c852a5b4ea2b359f3d25c57acc0ec5375d86319debf9e5bb4f7b00467f8b5d07f270f7c262a1a5f6c84c1914fd76bc41c42a97cd665c69a1ac0aa2682d1730dba1481b58b8690919545d292bfc9c40d3e18f9efb1efdb307a8ccb33e4bbe6d015860c99"}, @assoc={0x18, 0x117, 0x4, 0xfffff800}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x5d}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xe8, 0x117, 0x2, 0xcf, "ea71f23b3fbec14eb21396b5e34745a89830da1ed48959c0ec8f49c7b89f94fe0d22e97c2e36af0401a2455e00a8031d100d1ed94eb63c4c2775c440555b904b7b476a4c4ef957de67e157fac32ea537926ff63b52c789279736b2a9088a00ff7621f958107a5ed1c517ed94bab1b6b67fe6a72e3007672b45e37061b5c8b240b8765700785bbaef936f39394e3d1f8df302654db5376095d2cea85ef7f54dec084a9ae491a7c37481f93601b216e5a8e6883cc6cd03119475a6b29271a41ad3819bf86feb6da4bc31fac151b85eb2"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1230, 0x2000001}, {0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001980)="3b9ec918ef8be73b85638874c39690e70fe449e0666d762aa9bba5347386d942bf08a6504da1a4ae2e45a8c5a56790d60049ae3ad7e92fe9c2c5a9c0f71a2f9600d1d45ba22126d10026a6c02d0dfe766285e6237b8616ab557260e4126a010631917b2c0cf3b14d6645fa8210601847dd16b4c0da2077ea7dd3c6ebc0d30351485fee198d8dd154602e640edc05e902196af3a3240dec81653797aa317d7149d3ba0916cd93b694827cdf3480dddf31c551bca3ab8c", 0xb6}], 0x1, &(0x7f0000001a80)=[@iv={0x30, 0x117, 0x2, 0x15, "c86b6e9fddfe4c7de12d52582fb66e076c9d605b49"}], 0x30, 0x20000080}, {0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001ac0)}, {&(0x7f0000001b00)="74cbd56f26f425588806586d7abb4cd572cc3eb32557f53eb6542ff82e8becb51ea6200f265c77a7d301d063f70144c3d7997d17cfd227a6348ea944ce73f875c6afcd6585ba20fb6975ca613d812f025babb46d998363d1051abd", 0x5b}, {&(0x7f0000001b80)="7e73f61a124df33fe480ae3c4f0c92f2a3b576fd7f72574ae2fdc358adf95abc8400a5b2e98f01b18c8d3d948e93c959b88abdd5ea0ceb92f175e9c96c815353869bd80272edb72dcdc5186e83f0ae2126d2b8ae061cd6990c00c2631cfeef66304f1af8a4c7524b810e3ab5bb3f9c4a9789f7563e4257f6eade0c2ab0c8472b7fbfa99b0b8de39ea4767139a73761aaf1a487741517e0fc60b9b66d7e8e96b96bc4a256cd25b89e5442c9664d2bbdbc720cc29f10b8df87aaee0bc9bfcec57b34a88f625faded5ea6325d4347315d7c412416b478eeb885536cf5c00a1bfddc93ec864b1b774e", 0xe7}, {&(0x7f0000001c80)="8cdc7532809540fb875b247317182cc5163df66659ad6c9ca618dcae2feb3bc1847d7ff0a1f6ef430fd0dac38def7299919022f4c3ce906ccd668967addc", 0x3e}, {&(0x7f0000001cc0)="86ee3de06aa1cde00b1f5fbaaa6d31c1b11b67d588615edb0b768ebb19d7993a8f31fd57539d34d5afeca1d779f277851089b287aef3fb2e5bcf2dedd7bfb3c0f0701b7552eb1773967eba73a7bde2f24c1fbc45cedc13b60349f090be3ce4601d8bc80f2542337f83bb827761726a6232", 0x71}, {&(0x7f0000001d40)="aa09dfbe1502e66b402ac5c893726790af235f67c764baa61ed5ebedfbe4bf7590777b239033c74c62038a238ca79fff8acdf14b3bee048e342aa74726afb5d03a7a8ea1f7e2ca46e73bc174615d6a77472019f494172510dfe3330cd1f2037486f1b4c75cca4b683d71b5cb6eaa7122a683df68e4cb01062429f115b375ae7c8dab0ee92fdf012004", 0x89}], 0x6, &(0x7f0000001e80)=[@iv={0x30, 0x117, 0x2, 0x1a, "f5079168064a7e5839d583e2f91bcbbdb0d9df687dae71a41ada"}], 0x30, 0x40055}, {0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001ec0)="d6c7934ee8fddfe1bbfaa1b3d51c1ba42a636af9adcd2677d0d4820b6de9cad8f95291ca5c25806cff34fb7680dfe915fe599ae9a00f3582813326adcd9ede1c95c01a36f27172af45268bd9e523bbcdaf7cc28ec432d9807840ed28e59162cec1ff3e570c8fb605272d10a1a83a800a0d1a6ed261d38abe364010b4d354efcb7e49768c56c8d2a332ab9ce0ef5e105fc2df0202b60ec2c7a7a1f22ef2eff323e20bc36fc1b9d0c46421ad9a5afdafbfe693b454d714aad2122b7c7e8b3c70ed564e1341c892b85fac5687355de4d22bbdb2c1c2621e988673718c06a57ef1f689f318b4", 0xe4}], 0x1, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002000)="f0d566c3a22189bd469fbc149df26c0654a131d5e53ea8fb4de06f5a33e91066d419d76429ac8acf54558b31d6c9e0ea359631d182147b03253b4609faaaca3479c6339de9bcdf2ada31f6ac92e8b472775c34", 0x53}, {&(0x7f0000002080)="ca4e5a1a6eb5dfcbf631bac996ca229449eca2bcac9b6298aa69c0abaa1d5ef220b03f2b00dd980006b4bad973d4d5", 0x2f}, {&(0x7f00000020c0)="c309205cc064804fe620d1711c526348fa1ba02d409c64140db2c9fa47d94033159d0dcfed9ae7bb69a29e17049d7a02f26d6a85a15a80a34741738bd37b5fee9a500fa97e1972403662b744879e610cd69c4f08252a3cfaba479a4e30cc", 0x5e}, {&(0x7f0000002140)="549eade412b50da54c53b9a52d647fc135e5ee630ff53816a2e8adcb47d2ab0cf120e1b173c1d244a59cc28eed89c62efb6b2abf0e141289340916a0e644cc253ef622cfe2659e11e30207432acc8f679aefee25f0bfe77b9d9d7c4fdb4e5186073561d5b75ba314e143e10e8ed6bad1b0d882bfead0b9fd3466c41f7141e93a37ce66244fafccf94e18", 0x8a}, {&(0x7f0000002200)="7605", 0x2}, {&(0x7f0000002240)="81b87e3dd5cc2ba458eb8469f085c2366ec763d900064ba3cff955340293be80a13caa7a7ea8810a718151d4e47c20c96ecc1eb9fad428e8bc6cba88865aa076f3f3a96897372b306249de1df343e0954f17032941a38598801a8a81871caaf1b7e3fe247f5ba5341818125d984ce751", 0x70}], 0x6, &(0x7f0000002340)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0xc8, 0x117, 0x2, 0xb3, "64d8dd5733d743da12aa679b0b37cdba8c7ade6032a766f9fa73d739bf9cf2ab7af6672ffb6b609c75d1a95946f123ac745307a20d2350d3a66425dbb14000f4a0946c16e648db9452be3e1b030c6496c6a4af210a4c787aa5e503974b1d598dc576752bf1245a2f094b03c86c8ec9aa91025035b584e6d0b2422b52d2ca5a7275464b9868726cfdfc276d66888f2bcccc3119919852c639e88c8cd9800e34896b1289f11cf1dbdd276aa14ca02fffebd6a839"}, @op={0x18, 0x117, 0x3, 0x1}], 0x158, 0x4}, {0x0, 0x0, &(0x7f0000003f00)=[{&(0x7f00000024c0)="9e122842e2498e55698e5d1e44be2e501eb7e31b16596e471de844913c07b21b644e0ba02c16506b7b5b57b3ed1491c0c228036d0e2a1bca573684f0a6f72329f3b0dc198bbf53a7426ae6798b3905335efb7b19b665e625c68aa687dc630a9451a1690a1d3d82123945963841b4a021a329b6b2faeba69dc947d145c2595865bcb0b36fa38c4b91895b72", 0x8b}, {&(0x7f0000002580)="04a4624efdeac3411d0511c710fe8577771770f44ff2143d33d38d5e7a18c5b884848a3d7b586446aa32489591cdbfcd61e5b5d3c767e8d7f56df8e239654a609b360a80e41009794c02bbb70f96612ea1e87435ac340a1bf71b629451bf0d0c2bfd59aa1a2641a246dbe236da66ce52faf7e99049c1ddeaba0ec6ba8d6fb288f556c873df54e73b3413be5a141f55b28592291ebe2ebee553c47c207b0312dd435c95e3f78caa9e98a14060d7787d5ce1af79bcfd2b56ca96d653dd90256699eacc918ae70849ee0931c535adc60fdb50095ca09e00b1368070a74ea65079944709", 0xe2}, {&(0x7f0000002680)="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", 0xfd}, {&(0x7f0000002780)}, {&(0x7f00000027c0)="7e9d59ebe0e2582bafab57c47129258ea1d1f0c78680921b25d4de1bcc7c11a1", 0x20}, {&(0x7f0000002800)="910d86f09e7958fdb54d291a1155971d6d0f095fe0f11e565353483ce3936f43b7d0722e9494a779b42278866e9b4eb2296292d933dec3dd36a7980374d4b94b4a7f7a97997891b4a648c62759df862d91afc8100a832f001a3d1fba80ccc92f16c5a11dd41e4eb842b3c2650dc3acece198b39709080b946ad7698fdabfeda4da3ebf5259b6570274d55ff1698d0fef1af75f608030de0ea34be9579d106453aae4e70f8d6f404cd7b0ef130e67d4c1964a62119a22bfdf93ad0076faf0221a1cd52f15481d7f3549ae5e53d970e1060bedd3205796edfcbe0fb40586eb", 0xde}, {&(0x7f0000003cc0)="41a9a40ad0558d7f6e7a9aaee4fabed5eff2c09c88458f4e501cc7bd30e132c83f03dc74cb9e90db472346a87708386fb77420da6a0be3e5bd971723431accca341fe4b0e94ebef553047fbc533bbee9084906759d4d7876c361afdc030b2044a6ecf7ebe8f5224c1d2d84061de0d62b44f9cbfde751c4510107757c0c661daab88a87d1665c6992f13a8d6239dd11c4e150a173ac6867138ba04b7a7956d63d062b6fb7bd88013382a6a07fde39265c1880d2275caa30260fe3acee3bac48d248fe3e2d324d30691caeb10f05162b6f5041edec", 0xd4}, {&(0x7f0000002900)="f9", 0x1}, {&(0x7f0000003dc0)="329dce54af76cfe593f1123ee5dddd8e1c0939931aa1cd00b778cbedac63227e69e751731b0bd3ccf3e45528dc9b60c2ae22874f52b52d307021fbd1727785c60cdb298413da5f1726d101cd4e23033107a27250938b8d297219cb8b1144658661f4f587590619b3456349c5b0af0f6f5b96033c21bdb95d101eab8d7aa9ae25fd5aad279ecc6074b621f511eaa0e8ef50aef3d3a7c439071dbfc610efc82fcf3961fc72e4b234984555e406127b1c18ca1329d32cb3186a79efbdafbcda2e1d21d27c95e1360fe4351a251d898c110ee7c92c7f38d0e05f4d7a9abfa8cb851a", 0xe0}, {&(0x7f0000003ec0)="84a5d7b01a4ab8105179ed373d8c75693df89b5908c25d33676e89d62e7ed8342df1116d150b3b09a5", 0x29}], 0xa, &(0x7f0000003fc0)=[@iv={0xf8, 0x117, 0x2, 0xdf, "8aafed630dd8ed9e867c154f6db84e09ad13d2daf326b70e7b3fc30b548c0b78d76b6b7a6c53fcd1f2f974c6f2fed31275323439c4bba0b16dd281628b942de19dc0cf75ecfa3ae6b1957b4f99fe2229bc8e26c2a0d646f14f143a70973ff643fa00752d26704a336007d464b5965b5d63d87ecb62c32d65ac2afcf5435d09f7188216918cfcfcfcb043610668a62032e1bb12aaa0add2bb50a257120fd747429a6b2959d30f025038cac4a993405ce5e0f4074b98c854c7aeb203c059eb715c90669d2b3d858282939ce0ea3bee12f2e9702625c8cb47439ce7ddd6508c38"}], 0xf8, 0x4004000}], 0x6, 0x1) 07:28:45 executing program 1: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1fd8068b6725e2de}, 0x240040c0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x80) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0xac, 0x3e89bbd4f4925a9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x2360, 0x0, 0x4, 0x0, 0x3, 0x0, 0x82, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) truncate(&(0x7f0000000480)='./file0\x00', 0x59c) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES64], 0x88}, 0x1, 0x0, 0x0, 0x20048881}, 0x40) r2 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000940)='./file0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000000)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {&(0x7f0000000880)="57595a4b414c4c45522020085ac19f69b8f2b2b1ea1b8a0ac9135eed1d06d1001cc2de850f1fffb2aed768634ef7e75effac2ac4c15e29fb3c18fafff8d198e312475ffa1d000000000000ad25822a17b17f463e104179c19c2ad2fbd1e5e0aaa2ab31ddc0777df2ec4f62826086704d", 0x70, 0x600}, {0x0, 0x0, 0x10e00}], 0x28104c0, &(0x7f00000004c0)={[{@numtail}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffa8c}}, {@fat=@check_strict}, {@utf8}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x100}}, {@uni_xlate}]}) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x2300) mknodat$loop(r2, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1a, r1, 0x1, 0x63, 0x6, @remote}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r1, @ANYBLOB="01840010000000001400350073022470919d9811e500000000000000"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x20040001}, 0x20044000) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000240)='./file1\x00', &(0x7f0000000640)='./file1\x00') 07:28:45 executing program 4: openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo\x00') getdents64(r0, &(0x7f0000000140)=""/4096, 0x1000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r1 = getpgid(0x0) recvmmsg$unix(r0, &(0x7f0000001400)=[{{&(0x7f0000000000), 0x6e, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000012002c400000000000fe00010001000100003721b08ce49b764662d8d1be49ac48f4180a36c6be68384976e305093c52233c9bd7de1ca42d29ce2c606443f77c05a89835973a3860c844ebc79ef41c95b3b0916ee6726bafa21d21a293cf464efaf286797be1b9aeeb710c221b8f37b3d0e13267c9e09f12953589de", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xb8}}], 0x1, 0x10040, &(0x7f0000001440)={0x0, 0x989680}) r2 = socket(0x10, 0x3, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001200), &(0x7f00000000c0)=0x80, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) syz_open_procfs(r1, &(0x7f0000001280)='net/l2cap\x00') sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001140)=ANY=[@ANYBLOB="7800000024000b0e00"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000008000100736671004c0002000600000009000000000000000000000000000000000000000000000000000000070000000c000000000000000008000000000000000000000000000000000000000000000000000082fd9c069cb14f09b9a9a52a7c1b0900000000000000104356bf1245"], 0x78}}, 0x0) [ 574.162630][T22761] ubi: mtd0 is already attached to ubi0 [ 574.193501][T22761] ubi: mtd0 is already attached to ubi0 [ 574.226830][ T20] usb 4-1: new high-speed USB device number 14 using dummy_hcd 07:28:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0xf8ff0300) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 574.311753][T22773] loop1: detected capacity change from 0 to 270 [ 574.465589][T22784] ubi: mtd0 is already attached to ubi0 [ 574.483933][T22777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 574.535434][T22784] ubi: mtd0 is already attached to ubi0 07:28:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x608040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:46 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @dev, @netrom, 0x0, [@rose, @netrom, @netrom, @default, @rose, @bcast]}, &(0x7f0000000140)=0x40, 0x80800) sendfile(r1, r0, &(0x7f0000000180)=0x2, 0x400) r2 = syz_open_dev$usbfs(&(0x7f0000001280), 0x1aa1, 0x3e3b00) r3 = signalfd(r1, &(0x7f00000001c0)={[0x7]}, 0x8) ioctl$USBDEVFS_RESET(r3, 0x5514) mmap(&(0x7f0000000000/0x400000)=nil, 0x400002, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x3, 0x1, 0x81, 0x7b, 0x0, 0xffffffffffffffff, 0x1000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x6, 0x100000001}, 0x1410, 0x8, 0x101, 0x8, 0x100, 0x2, 0x0, 0x0, 0x800, 0x0, 0x1}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x7, 0x7, 0xff, 0xff, 0x0, 0xd0b, 0x2010, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x2, @perf_bp={&(0x7f0000000200), 0xf}, 0x861, 0x1, 0xfffeffff, 0x5, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0xf0}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000040), 0x9) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) lseek(r5, 0x8, 0x4) [ 574.618269][ T20] usb 4-1: New USB device found, idVendor=0c45, idProduct=610a, bcdDevice=fd.92 [ 574.625382][T22774] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 574.639155][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 07:28:46 executing program 4: r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x5, 0x5, 0x7f}) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000580)=[&(0x7f0000000740)='&:\x10`\xe8-\x89\x90o\xdb\xc2\xcbZ\xd5ch\xb5\x1c\t\x95]\xb6;\xc0\x86\xfb\x80\xd7\xc5\xa0\xbc8\xf5\x10\x13\xf4\xab\x8bP\x01\xb9_\x1de\xb2\x82\x99Q\xd6\x83\x91\x05&\xc1\xc4,*P#\xd3X\x10\xc9B\xcaf)\xb7\x98\x95G\xa4\xa9\x96\xdeW\xb0\xbda\xbdpo\xb4\x1b\x9f\x8c\x86j8\x95\x8b\x94\xb1\xd2bN\xea\xf8\xa8\x9f\xdb\xfe4j\xcc\xc9\xf5\xf7\xbd\xfe\x84\xe7j\x01\x83\x94\xbfI\x8af\xed\xeb:\xad2\xf0\x7f\x13\xce\xb4\x17t4\x04k\xd0\x05\xf4\xf4B\xdb^U\xe5\xed\xfd\xa7\x8fK\xc7\xe9\xfd\x7fT\x80\x9b\x95\xb3\xb2\v\x99\xe55\xbbp\b\\5j\x917\xb02\xe9{\xf20\x96\x83\"d\xafC\x95\x9bi\xc0\xebh6?a~\x11\xfdF\xa8\xe2G\xd2\x81\x10\xc9\xfa\xc4q\xac\x91\x8d\xa2\x10\"\x03Y\xfa\xfe\xcd\xfb\xaeO\xfb\xed\xa1W\xe3\xf0s\x88z\x94\x1d/5\xaa,\x11\x014\xe2k%u}\xe8{~_\xc0\x0f&UI\xf7\xce\xc3m\xa9\x7f\n@@e\x98\xcf\x90\xe7\x1c\x95\fGj\xa4\xe9\x1d\x8f\x875!\xce+\x8d\xb1\xb9vn\x80$9\x8a\x143\xcb1\xe0\x9a\x91\xb3NxQ!Ih0k\xf3b\xe5\a\xa0\xfb\xebT\xf6x\xf0\x003\xea\xff\b\xce\x94P-\xef\xf44\xba\x9a\xf7[', 0x0]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) clone(0x20000200, &(0x7f00000000c0)="11", 0x0, &(0x7f0000000180), 0x0) 07:28:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/1662], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) r1 = creat(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000002c0)={0x18, 0x0, {0x3, @broadcast, 'bridge0\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x8, &(0x7f0000000080)=@raw=[@map={0x18, 0x5, 0x1, 0x0, r1}, @ldst={0x2, 0x2, 0x3, 0x8, 0x8, 0x8, 0x8}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @map={0x18, 0x9, 0x1, 0x0, r0}, @ldst={0x2, 0x2, 0x3, 0x4, 0x0, 0x0, 0x10}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x3d, &(0x7f0000000100)=""/61, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x0, 0x40, 0x80000001}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r2, 0x0, 0x5b, 0xc, &(0x7f0000000ac0)="cafba3bcffe51edb8339a5c2a5fe52e174b4fe7e0e006d1cf3caf906e0043288fd7dfa56c4b5f8ddf6f8726321a613aafe05ce42edcf19e745a64f8ec812c864bc7f7a42fe108e538aea1129623247ec5badb6fd66e7682019f738", &(0x7f00000001c0)=""/12, 0x3, 0x0, 0x3e, 0x14, &(0x7f0000000280)="d92eb30e58129ceb3a538d1d10784409606c0fa9d98592974790fae3348bdbd36350fd450ec956d972f3f071e18b6c2b4d6c52248f9cb655235e0ceecce7", &(0x7f0000000300)="e61c164b65ba93f4d0f08055d7c75e71d341be36", 0x1, 0x7}, 0x48) [ 574.684277][ T20] usb 4-1: config 0 descriptor?? [ 574.744194][T22794] ubi: mtd0 is already attached to ubi0 [ 574.759150][ T20] gspca_main: sonixj-2.14.0 probing 0c45:610a [ 574.769247][T22794] ubi0: detaching mtd0 [ 574.794811][T22794] ubi0: mtd0 is detached [ 574.826853][T22802] ubi0: attaching mtd0 07:28:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x800, 0x20000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000140)={0x1, [0x0]}) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xac14140a, @empty, {[@generic={0x0, 0x2}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast1}, {@multicast2}]}, @noop, @cipso={0x86, 0x12, 0x0, [{0x0, 0xc, "cc6676c4056fc6033186"}]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@remote}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000080)={@multicast, @local, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x3, 0x4, 0x0, 0x0, "4ba2cf1f9fbf0656"}}}}, &(0x7f00000000c0)={0x0, 0x3, [0xf8e, 0x7e6, 0x306, 0xd2e]}) [ 574.850661][T22802] ubi0: scanning is finished [ 575.102086][T22802] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 577.396602][ T20] gspca_sonixj: reg_w1 err -71 [ 577.476602][ T20] sonixj: probe of 4-1:0.0 failed with error -71 [ 577.493261][ T20] usb 4-1: USB disconnect, device number 14 [ 578.166473][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd 07:28:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = signalfd(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x81, 0x0, 0x2, 0x8, 0x1, 0x6}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x14600400, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 07:28:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f00000001000010600"/20, @ANYRES32=0x0, @ANYBLOB="0fff000000000000c000128009000100766c616e00000000b000028006000100010000000600010002000000100004800c00010000800000080000000c0002000200000010000000100003800c0001000400000003000000280003800c000100070000002d0000000c00010001000000000800000c0001008e000000800000000600050088a80000400003800c0001005908ffff070000000c00010020000000cd0000000c01010000020000070000000c00010001000000800000000c000100000100000080000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 07:28:50 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x40, &(0x7f0000000040), 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000840)=[@textreal={0x8, &(0x7f0000000180)="0f20d86635200000000f22d8ba4300b80080ef0f4049340fc7598066b90609000066b86973b23366ba018e785e0f300fc79f008867f30f09650f01cf660f6d802fb1", 0x42}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x5, 0x0) 07:28:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x1f, 0x7, 0xb2, 0x5b, 0x0, 0x82, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x2806, 0x800, 0x80000000, 0x7, 0x40, 0x1, 0x1, 0x0, 0x200000, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa6b3a609763d7683, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='objagg_obj_parent_assign\x00', r3}, 0x10) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) 07:28:50 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) splice(r2, 0x0, r3, 0x0, 0x7fffffff, 0x0) 07:28:50 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0xf5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x200b001, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000080), 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000011000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014003500626f6e643000"/28], 0x34}}, 0x0) [ 578.566505][ T7] usb 4-1: unable to read config index 0 descriptor/all [ 578.573911][ T7] usb 4-1: can't read configurations, error -71 [ 578.650562][T22858] ubi0: attaching mtd0 [ 578.656761][T22858] ubi0: scanning is finished [ 578.690047][T22861] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 578.728537][T22858] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 578.744685][T22861] device vlan2 entered promiscuous mode [ 578.752051][T22866] mmap: syz-executor.3 (22866) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 578.756290][T22858] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 578.779463][T22861] device team0 entered promiscuous mode [ 578.794007][T22861] device team_slave_0 entered promiscuous mode [ 578.821672][T22861] device team_slave_1 entered promiscuous mode [ 578.828521][T22858] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 07:28:50 executing program 5: r0 = syz_mount_image$befs(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x81, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="369e5b7feb4c24967259ddb5075bbcd730f3c2574f11defb775dee002747b6160c48f91a549f5b3ca2352764b8e2adb58eabfbd2e428361ea282bb4f39337c2c5c75a8b3cefec9ff6665376f48", 0x4d, 0x100}, {&(0x7f00000004c0)="4761e6bd9870cb3cc9f472420c18724b15e97ad319eed65f2201b1c0a9a8e7ff55285bb1e557461e832e32fd9ff3a677937d3cc9da8c9d05c690355f2ce58a0d548caf0ca68aed35c7f407fc37e802e6a28fde6f992cc772c5bfc70eec9c192dcd82a088c6380be3f1cb2f1e26e8fce7912ca94363efa73c79ee989678203f3036488584d66325c00bd6e2dc6cf7d394b2b98f86e444b831f5b9440d72", 0x9d, 0x20}, {&(0x7f0000000580)="da371730f6f08b32ec16a8682336a2e59dbbaa23b04476481d72c939e6df112bbfb56e8eb124197a66cb51a107cce9f978feb32190789cf6ec4799d0039533fa772e14e1ef52679c8351fbb8802e16e930d6f44ba2486fe3997f93454f00635a990521a936e7771a0415b281d17dfd8fb3c63d3e2198b2574bd353ea4d3069744b3938a0cd1383d60e932a511d9f0eef4e5fa09abfbffa9cef57baf484a56ffbbe7ec1d93bd60dffa1daafac9ebee3eecc88a1f14ddb0b3a393bb0663971b0f512a866cd0b60d64063c8e0d042fa7437959b498ef66ca4a86a8f837216e43176e291ada0136161c064dc17131fd5100eb83515d376", 0xf5, 0x9bf8}, {&(0x7f0000000680)="374a45eb3b6637e198bd7e0b19fd25b851c4302672a9d14da68e33d9bd2b14b2df5283613c83090cbfbd2cc7f5", 0x2d, 0x5}], 0x2049800, &(0x7f0000000740)={[{'-#'}, {'\x00'}, {'\x00'}, {}, {'\x00'}, {'*^-[^'}, {'\x00'}, {'\x00'}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'GPL\x00'}}, {@appraise}]}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5449, 0x7, &(0x7f0000001b80)=[{&(0x7f00000000c0)="c8e668ff44b1cdd4d9ef4723cb8bfd106872c89bb9562159bc14b88d41f208790ee8d39de83c966a372faf2b967c13335af37e864e242a3a525f865534aa188db408bd40b9f13c822851ba56", 0x4c, 0x7fffffff}, {&(0x7f0000000140)="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", 0xfe, 0xfff}, {&(0x7f0000000240)="f6b4893b86334fa1daf39165abed2f4d3d815db80d3fe8c77d65", 0x1a, 0x40}, {&(0x7f0000000280)="f8dbe8a7c8059d184625c830aa07ca156dd068661aef3682190817cbcbe6d087cce941fc5db8aad1c14e97fc4d9cf9537e59750826540826875cdaf1277e913c2700bbe862279498ed615b3c1228922d53aedf5dc75bfe7888c0fdc0359f2159b35930ef7fbc205c08181888db87f0c657796d05a3fa", 0x76, 0x101}, {&(0x7f0000000b80)="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", 0x1000, 0x7}, {&(0x7f0000000300)="24a33d19a369f0", 0x7, 0x7}, {&(0x7f0000000800)="444b73244724be3d0e8043736d67715dae9f9ceff76733138bceb39e5241645f79cb44fd943203713630de3eeeaa339c2ff5ebb074872d9572ddd75f0b2a238bf57989f5e14aad515f99f9688ce656e37513de68a181bad78c2f7a66ea5329f624a39559e680624695f7a0c49a6c04e9ad6f62f1e02319ff87a1030e55dccf34f2aa915deb6c6a", 0x87, 0xab}], 0x46010, &(0x7f00000008c0)={[{@force}, {}], [{@permit_directio}, {@appraise_type}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002000)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, '.\x00'}) r3 = syz_mount_image$hfsplus(&(0x7f0000001c40), &(0x7f0000001c80)='./file0\x00', 0x0, 0x4, &(0x7f0000001f80)=[{&(0x7f0000001cc0)="01c9ddbb7085608ae6efdf25e6dbaecd4c7a4d579459526943c87859a0ea7e28535b7ac2dfbda9ef75c18204f3895f646cfb329dee8ca08cb6dbb90486057526c1e0a3650d1e1a776de277642274e2b96aa0ba737600d3e14d502f0437aa2b2e9ff75946d30897dd310a6e38d3607bb923f8b7e9745b2e09f96819887024a54fc2c10ebe80569194cc4a95765069e9e1058663f0ff9eb9adb10183e8e8d80d908974", 0xa2, 0x3fca}, {&(0x7f0000001d80)="516d951f8713a36e42bc0f45568014998d8a21758b6712ab97a9805ff56581960504cda893892ef475a757b53d6b7026b13e1659511ad4252c2a7fc95b81a071fe5f5fc31bc34d9b064a30618cba8e093a71265d86ca4b91e01a2c2aa1b5da5f31f2e319f335a899b52f9e1115247455a29edf16a62b9ec74c11333d8027c7913544e836f5d35882c34cb2786c86", 0x8e, 0x5}, {&(0x7f0000001e40)="976e3c458da2bd9846f1ca44998f249dd3d521497217b60cf6bdc09184173e8bb06798c98f5656b015b3ea06a09cbaa18dbce8006b502496ba38042f16f8062138503caedad9cf43", 0x48, 0x8}, {&(0x7f0000001ec0)="789c16e22394aa37363a1ef03d8970528dcbae6324e5dd6bef0f032c5b467501e6220ab7aa1ab2f8c64211602da3affa7f01dfe86cd7ee13b68db1f3d77c355412ba5dfd5b0c31adf4674358f5102ff0338902b8ea56f205079d056a8f3e246d3dc72eb28eceab39a1e8b11ad7e9b289b94066e3f4eccb93a722b22fced5dd2a46333aae82c03e452a2857dd6e87cf", 0x8f, 0x2c57}], 0x84810, &(0x7f0000002040)={[{@force}, {@nobarrier}, {@session={'session', 0x3d, 0x1823ec7}}], [{@permit_directio}, {@smackfshat={'smackfshat', 0x3d, 'hfsplus\x00'}}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}, {@pcr={'pcr', 0x3d, 0x15}}, {@uid_eq={'uid', 0x3d, r2}}, {@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000002100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000007c0)={0x9, 0x0, &(0x7f0000000780)=[r0, 0xffffffffffffffff]}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 07:28:50 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000080)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$sysfs(0xffffff9c, &(0x7f0000002040)='/sys/block/loop0', 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) openat$bsg(0xffffff9c, &(0x7f0000000180), 0x10401, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf1d, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x7, 0x0, 0x0, '\x00', 0x0, 0x200}) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000000000001000000000000000000f9ffffff0000000000000080000000001f0000001300000000010000000000000100000007000000000000000d02003b00000000000000000d000000000000000000008029000000060000000000000012"]) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0x80, 0x4, 0x40, 0x0, 0x2, 0xa090, 0xe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xf3, 0x7f}, 0x8100, 0x0, 0x0, 0x3, 0x3, 0x3f, 0xfffe, 0x0, 0x6, 0x0, 0x5}, 0x0, 0x3, r5, 0x0) ioctl$KVM_SET_CPUID(r4, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x2) [ 578.929521][T22861] team0: Device vlan2 is already an upper device of the team interface [ 578.945025][T22858] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 578.996717][T22858] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 579.018550][T22861] device team0 left promiscuous mode [ 579.034556][T22858] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 579.049572][T22861] device team_slave_0 left promiscuous mode [ 579.069529][T22875] loop5: detected capacity change from 0 to 155 [ 579.082959][T22861] device team_slave_1 left promiscuous mode [ 579.085570][T22858] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 579.153318][T22858] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 579.194312][T22884] loop5: detected capacity change from 0 to 264192 [ 579.243551][T22864] ubi0: background thread "ubi_bgt0d" started, PID 22864 [ 579.252886][T22862] ubi0: detaching mtd0 [ 579.269553][T22862] ubi0: mtd0 is detached 07:28:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000040)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, 0x0}, 0x80) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 579.311222][T22875] loop5: detected capacity change from 0 to 155 07:28:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000380)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) perf_event_open(&(0x7f0000002000)={0x0, 0x80, 0xa1, 0x7, 0x5, 0x61, 0x0, 0x6, 0x11000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000001d40), 0x2}, 0x6020, 0x20, 0x8, 0x9, 0x0, 0x800101, 0x5, 0x0, 0x3, 0x0, 0x3ff}, r1, 0x80000b, 0xffffffffffffffff, 0x8) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000200)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/138, 0x8a}, {&(0x7f0000000140)=""/90, 0x5a}, {&(0x7f00000001c0)=""/18, 0x12}], 0x4, &(0x7f0000000240)=""/189, 0xbd}, 0x8000}, {{&(0x7f0000000300)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/118, 0x76}], 0x1, &(0x7f0000000480)=""/62, 0x3e}, 0x8001}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/239, 0xef}], 0x100000000000017d, &(0x7f0000000600)=""/102, 0x66}, 0x2}, {{&(0x7f00000016c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001740)=""/8, 0x8}, {&(0x7f0000001780)=""/239, 0xef}, {&(0x7f0000001880)=""/120, 0x78}], 0x3, &(0x7f0000001940)=""/215, 0xd7}, 0x6}, {{&(0x7f0000001a40)=@pppol2tpin6, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001ac0)=""/9, 0x9}, {&(0x7f0000001b00)=""/93, 0x5d}, {&(0x7f0000001b80)=""/159, 0x9f}], 0x3, &(0x7f0000001c80)=""/19, 0x13}, 0x6}, {{&(0x7f0000001cc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001d40)}], 0x1, &(0x7f0000001dc0)=""/191, 0xbf}, 0x4}], 0x6, 0x142, 0x0) [ 579.504249][T22905] ubi0: attaching mtd0 [ 579.522034][T22905] ubi0: scanning is finished [ 579.583353][T22910] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 579.667833][T22910] device vlan2 entered promiscuous mode [ 579.710998][T22910] device team0 entered promiscuous mode [ 579.748450][T22910] device team_slave_0 entered promiscuous mode [ 579.762217][T22905] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 579.786839][T22910] device team_slave_1 entered promiscuous mode [ 579.793318][T22905] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 07:28:51 executing program 5: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x3, 0x9, 0x1f, 0x0, 0x10001, 0x4004, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x54950, 0x8001, 0xffffffff, 0x6, 0x9, 0x4, 0x5, 0x0, 0xff, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0xa) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003]}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000140)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000056f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000000c0)="66ba4000b0c2ee66bad104b829280000efea0e0000000a00b8050000000f23d80f21f835c00000a00f23f8653e65f30f21c62e0fae2b0f01c2b8060000000f23d00f21f835200000000f23f8c4c3a1cf830000000002d9f7", 0x58}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, 0x0) [ 579.813362][T22910] team0: Device vlan2 is already an upper device of the team interface [ 579.841263][T22905] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 07:28:51 executing program 3: setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_io_uring_setup(0x884, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, 0x0, &(0x7f0000000040)) r0 = syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x0, @fd_index=0x8, 0x0, 0xade, 0x0, 0x0, 0x0, {0x2}}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000400)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x10}}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x3, 0x40, 0xff, 0x0, 0x0, 0x5, 0x9228, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x10012, 0x40, 0x3, 0x7, 0x6, 0xfffffffb, 0x3, 0x0, 0x3, 0x0, 0xf5f4}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) io_uring_enter(r0, 0x688c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 579.858791][T22905] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 579.867433][T22910] device team0 left promiscuous mode [ 579.872939][T22910] device team_slave_0 left promiscuous mode [ 579.886283][T22910] device team_slave_1 left promiscuous mode [ 579.896934][T22905] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 579.932598][T22905] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 579.967218][T22905] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 580.022203][T22905] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 580.032654][ T22] Bluetooth: hci4: command 0x0406 tx timeout 07:28:51 executing program 4: syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x101}], 0x0, &(0x7f0000000640)=ANY=[]) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) [ 580.073309][T22917] ubi0: background thread "ubi_bgt0d" started, PID 22917 [ 580.102789][T22911] ubi: mtd0 is already attached to ubi0 07:28:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xb, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001}, [@call={0x85, 0x0, 0x0, 0x34}, @map={0x18, 0x3, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x5, 0x8, 0x0, 0xfffffffffffffffc}, @exit, @map={0x18, 0x7, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0xa, 0x9, 0x3, 0x6, 0xfffffffffffffff0}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x9, 0x101, 0x401}, 0x10, 0xffffffffffffffff, r0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x98b9, 0x0, 0x0, 0x0, 0x6}, [@map={0x18, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6df}]}, &(0x7f0000000040)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x0, 0x100, 0x9b}, 0x10, 0x0, r1}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 580.289766][T22936] loop4: detected capacity change from 0 to 1 [ 580.380121][T22936] EXT4-fs (loop4): unable to read superblock [ 580.439501][T22941] ubi: mtd0 is already attached to ubi0 [ 580.470592][T22941] ubi0: detaching mtd0 [ 580.497099][T22936] loop4: detected capacity change from 0 to 1 [ 580.508398][T22941] ubi0: mtd0 is detached [ 580.521153][T22936] EXT4-fs (loop4): unable to read superblock [ 580.534804][T22941] ubi0: attaching mtd0 [ 580.544767][T22941] ubi0: scanning is finished [ 580.662111][T22941] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 580.999477][ T8109] device hsr_slave_0 left promiscuous mode [ 581.037379][ T8109] device hsr_slave_1 left promiscuous mode [ 581.045851][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.062393][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.085833][ T8109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.103386][ T8109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.126503][ T8109] device macsec0 left promiscuous mode [ 581.143988][ T8109] bridge0: port 3(macsec0) entered disabled state [ 581.165273][ T8109] device bridge_slave_1 left promiscuous mode [ 581.192673][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.227808][ T8109] device bridge_slave_0 left promiscuous mode [ 581.234207][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.275188][ T8109] device veth1_macvtap left promiscuous mode [ 581.288191][ T8109] device veth0_macvtap left promiscuous mode [ 581.311400][ T8109] device veth1_vlan left promiscuous mode [ 581.327907][ T8109] device veth0_vlan left promiscuous mode [ 581.949085][ T8109] team0 (unregistering): Port device bridge1 removed [ 582.043214][ T8109] team0 (unregistering): Port device veth3 removed [ 582.554157][ T8109] team0 (unregistering): Port device team_slave_1 removed 07:28:54 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x5, 0x5, {0x0}, {0xee00}, 0x5, 0x101}) sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x40, 0x4, 0x400, 0x200, 0x2, 0xf895, 0x1, 0x4}, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 07:28:54 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="06000000000000002e2f66696c653000f9c8d91fcb0d57b6b019d54b86618735f1a9b6bbe1da73ed21689032f20da0c3a58b5cd1cf24c471c764421cf9d9929f8d"]) perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x8, 0x20, 0x6, 0xff, 0x0, 0xfffffffffffffe00, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x80000, 0x80000000, 0xffff, 0x1, 0x6, 0x1, 0x9000, 0x0, 0x11, 0x0, 0xffffffffffff8000}, 0x0, 0xc, r1, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="b330a88f18c3f1a6a56e06bba466303d613ad7a9778506a0c386f7b1e37bdbb2b09ec37a9fb3f54d0156caf1b0c50b656d1a959598acb9b81ee68fb1c7404c1dde8c4ffe4cce055f53b1bc5ab8db8fe8cd7baab1f270219b9dea71c8a5f074e041d12abad914468b6cbd3a6c5caef5967dd1de741267d9a6d78ff9f3b1b3f482815aa3", 0x83}, {&(0x7f0000000380)="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", 0xfffffffffffffca1}, {&(0x7f0000000780)="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"}], 0x2}, 0x20040814) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000001000000180000005469e2eac280922bf1233607c9311923abee378624f7c4e1792586ecbc3887e8b2ae80c3357ee92193e19d6fc2d0adabe81310586cd68a884919d9fd445cde4b", @ANYRES32=r3, @ANYBLOB="434a29a2000000002e2f660600653001cd4c41b050a601dfe63f7d1a2d088bd1a9f8628e32dbe1e1988cb8f9b5fbda9a76d9bafc5e1ea54e92caf11ba424414572efa07af930078d245f1a9731b0d1a0798925f9a85d705f86d1e8febe1578372492cb8f27cd92d408000000302750fb0d6926616bf04e5ef8f39664ae038900000000785aa132e080609a84b7dd60ed11ffe0973c5c48170ae267389e7a5eb3ff1234af3696fa332c67b94cf81e4203c8597f08cb320d6232cc32d3c1c132ff835b1b80363a4fea5f1fe497510591145ae90d4f05011f99a813f180b5d8373e838623f3f56e68"]) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000240), 0x4) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) getpid() ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000080)=0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20d7e, 0x0) write$nbd(r6, &(0x7f0000000000)={0x6000000, 0x0, 0x0, 0x0, 0x2, "a309ff0f00005f56d3adffee27873d099cbab35a2fdbede577c78984607d768abafbd0979d0100500000bb02f6b7807e5dadca473f0080000000000000000000000000001500f81e79ab59fc73c6a880bcb1765e00010000"}, 0x68) setsockopt$inet6_tcp_buf(r6, 0x6, 0x21, &(0x7f00000000c0)="7662d42b37fe82a3da8dffa385ab03731d944e4f285b94231c8f0ed865667c83747f160965aa340f11ee65df4fef3aef26a84eaffae3749939c1d498095652e91e8e7e9fd29227dc54eb089ca49d431965513dfa9efb21aca61ccfc3adcf4120", 0x60) r7 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) ioctl$BTRFS_IOC_QUOTA_RESCAN(r7, 0x4040942c, &(0x7f0000000140)={0x0, 0x8000, [0x3, 0x0, 0x40, 0x5, 0x5, 0x5]}) 07:28:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='xen_mmu_alloc_ptpage\x00'}, 0x10) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x1, 0x80, 0x6, 0x5, 0x0, 0x3ff, 0x40880, 0xb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xa5b7}, 0x4281, 0x4, 0x7, 0x2, 0x1, 0x1f, 0x0, 0x0, 0x7, 0x0, 0x6}, r0, 0x5, r1, 0x8) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r2, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:54 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) get_robust_list(r0, 0x0, &(0x7f0000000300)) r1 = perf_event_open(&(0x7f000001d000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x10606, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') ptrace$setregset(0x4205, r0, 0x3, &(0x7f0000000480)={&(0x7f00000003c0)="322c00b1076073b5800553f7ded514bc20e8d576f858aa30602f30943441a01b707c631cb22dfaef366ef5dd5e9a3acbb871514a0b219911808ba3605ffb97cf9597e46d5d4d94cb718293df257d049551dd3aa730c918f96ac4e044e912ae3476e12ce9e8fee3a951e027bb78d5f527f916e9003ae870cb7359c77465a1ce9cc73e1ce1a309797182b257df6d59293c", 0x90}) sched_setscheduler(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x9, 0x1, 0x36, 0x0, 0x6, 0x8880, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x6, 0xfffffffffffeffff}, 0x40000, 0x3fffffff80, 0x200000, 0x7, 0x1da, 0x800, 0x3206, 0x0, 0x7, 0x0, 0x2}, r2, 0x0, r1, 0x1) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x7, 0x8, 0x1f, 0x0, 0xbc3c, 0x41080, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x1, 0x5}, 0xd48, 0x400, 0x8, 0x1, 0x81, 0x200, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8030008, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559"}, 0x28) 07:28:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) perf_event_open(&(0x7f0000000a00)={0x4, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x5, 0x4, 0xe76, 0x402, 0x47e, 0x0, 0x6, 0x0, 0x8000}, 0x0, 0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) dup3(r2, r1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) r3 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) pipe(&(0x7f0000000000)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000001c0)={0x0, 0x7, 0x0, [0x0, 0x0, 0x0, 0x5, 0x5], [0x100000001, 0x80000000, 0x0, 0x6, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x9, 0x1ff, 0x200, 0x0, 0x0, 0x0, 0x400, 0x1d9c, 0x4, 0x66, 0x0, 0x0, 0x0, 0x1, 0x1, 0x7, 0x800, 0x0, 0x1, 0x0, 0x3, 0x4, 0x0, 0xff, 0xe76, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x80000001, 0x5, 0x0, 0x81, 0xffffffff9f336601, 0x0, 0x1, 0x1, 0x100000000, 0x0, 0x7, 0x400, 0x2, 0x3, 0x6, 0x0, 0xfffffffffffffaa9, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7dc0d6aa, 0x2, 0x400, 0x1f, 0x3, 0xffff, 0x58797d7a, 0x7, 0x0, 0xfffffffffffffff9, 0x1, 0x0, 0x1, 0x100000000, 0x101, 0x0, 0x3ff, 0x0, 0x1, 0x100, 0x4, 0x9, 0xfffffffffffffff8, 0x0, 0x8, 0x0, 0x0, 0x7, 0x9, 0x0, 0x80000001, 0x2, 0x81, 0x8, 0x80, 0x2, 0x80000001, 0x8, 0xa9, 0x2, 0x4, 0xc000000000000000, 0x10001, 0x40, 0x12e00, 0x0, 0x1f, 0x3ff, 0xfff, 0x6, 0x0, 0xe00000000000000, 0x5, 0x8000, 0x7fff, 0x7ff, 0x7, 0x400, 0x1, 0xfcf4]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000300)={0x4, 0x6, {0x8, @usage=0x4, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x80000001, 0x0, @usage=0x81, 0x0, 0x8, [0xd1, 0x0, 0x0, 0x0, 0xfffffffffffffc00, 0x3]}, {0x3, @struct={0xdc87}, 0x0, 0x331, 0x4, 0x9, 0x6, 0x5, 0x1, @usage=0x7, 0x6, 0x1, [0x4, 0x8000, 0x0, 0x40, 0xfffffffffffff001, 0x1]}, {0x4bbe, @usage=0x1f, 0x0, 0x1, 0xffffffff00000080, 0x0, 0x5, 0x0, 0x483, @usage=0x2, 0xffff, 0x4, [0x6, 0x8, 0x0, 0x0, 0x0, 0x1]}, {0x3, 0xfffff80000000000, 0x5}}) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000140)={'nr0\x00', {0x2, 0x0, @dev}}) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x9, 0x3, 0x1}, 0x10) ftruncate(r3, 0x600004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) [ 582.642545][ T8109] team0 (unregistering): Port device team_slave_0 removed [ 582.668134][ T8109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.708435][ T8109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.769808][T22979] ubi0: attaching mtd0 [ 582.798595][T22979] ubi0: scanning is finished [ 583.025972][T22979] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 583.044062][T22979] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 583.094837][T22979] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 583.109813][T22979] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 583.175950][T22979] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 583.216092][T22979] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 583.247108][ T8109] bond0 (unregistering): Released all slaves [ 583.262829][T22979] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 583.326207][T22979] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 583.356089][T22988] ubi0: background thread "ubi_bgt0d" started, PID 22988 [ 583.363270][T22982] ubi0: detaching mtd0 07:28:54 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r3, @ANYBLOB="2f01221600000000000000000000a22ecb7a4d"], 0x48}}, 0x0) dup3(r0, r1, 0x80000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x24, r6, 0xc504a10aabf87db7, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x120, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81d9}]}]}]}, 0x120}}, 0x0) [ 583.374160][T22982] ubi0: mtd0 is detached [ 583.393202][T22979] ubi0: attaching mtd0 [ 583.401066][T22979] ubi0: scanning is finished [ 583.493873][T22993] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 583.588115][T22993] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 583.622298][T22979] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:28:55 executing program 1: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x2008001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) sendto$inet6(r1, &(0x7f0000000440)="748af90453ea292a2c2099c5a98cfb9ab3d5678155964a2012e08d6ec5d754b56ecb4e39df71c63ecfb136580da4b7bf52aa2a55fe35015ee5c3cbb16454704025e60bfa44d6c8ed91dc753d2157a30f03536211c14338c456f12bf857963b1ee68e4e52b17c4171b99dc4d3acb3853022eb5c47d3ad8deae8ae5210c7c66a435fdb81dc0297eec212e24ea6279505dccce3a553f839", 0x96, 0x20008080, &(0x7f0000000080)={0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, '\x00', 0xa}, 0x4}, 0x1c) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000b80)=[{&(0x7f0000000040)=""/44, 0x2c}], 0x1, &(0x7f0000000180)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 07:28:55 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0}, 0x41824, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 583.847005][T23003] ubi0: attaching mtd0 [ 583.858117][T23003] ubi0: scanning is finished [ 583.922218][T23003] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 583.931981][T23003] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 583.941713][T23003] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 583.949907][T23003] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 583.959457][T23003] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 583.967348][T23003] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 583.994971][T23003] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 584.035498][T23003] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 584.089479][T23007] ubi0: background thread "ubi_bgt0d" started, PID 23007 [ 584.098436][T23005] ubi0: detaching mtd0 [ 584.117056][T23005] ubi0: mtd0 is detached [ 584.129649][T23003] ubi0: attaching mtd0 [ 584.134881][T23003] ubi0: scanning is finished [ 584.227041][T23003] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 585.065043][ T26] audit: type=1800 audit(1638689336.591:41): pid=22984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15220 res=0 errno=0 07:28:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000055e000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f0000000080)=[@efer={0x2, 0x800}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0, 0xc}], 0x1, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000001c0)={"b469d6444f603390cac0306a46f190b8", r4, 0x0, {0x4, 0x2}, {0x0, 0x4}, 0x7f, [0x4, 0x90e1, 0x6, 0x7f, 0x6, 0x5, 0x58, 0x2, 0x0, 0xfff, 0x4, 0x1, 0x80000001, 0x0, 0x8, 0x7ff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:28:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1c0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) sched_setscheduler(r0, 0x6, &(0x7f0000000540)=0x9) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40032101) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) mlockall(0x7) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) write$cgroup_pid(r2, &(0x7f00000002c0)=r0, 0x12) syz_mount_image$gfs2meta(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2a80004, &(0x7f0000000440)={[{'trusted.overlay.upper\x00'}, {']$%+,&]'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_user={'subj_user', 0x3d, '@.@].-'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x65, 0x39, 0x62, 0x36, 0x37, 0x38, 0x62], 0x2d, [0x34, 0x0, 0x62, 0x36], 0x2d, [0x66, 0x32, 0x36, 0x5d], 0x2d, [0x37, 0x62, 0x30, 0x64], 0x2d, [0x35, 0x30, 0x30, 0x39, 0x35, 0x64, 0x65, 0x38]}}}, {@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}]}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/96, 0x60}, {&(0x7f0000000680)=""/7, 0x7}, {&(0x7f00000006c0)=""/210, 0xd2}], 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="a2362102"], 0x68}, 0x40001000) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x1f, 0x1, 0x6, 0x3, 0x0, 0xfffffffffffffffc, 0x4100, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0xb9, 0x5}, 0x1000, 0x6, 0x5, 0x0, 0x40, 0x3ff, 0x1, 0x0, 0x80000000, 0x0, 0x3}, 0xffffffffffffffff, 0xb, r4, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x13, r3, 0xffffe000) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESOCT=r1, @ANYRES32, @ANYRES16], 0xc001, 0x1) 07:28:56 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = dup2(r0, r1) getsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040), &(0x7f0000000140)=0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000002c0)={0x1d, 0x8, 0x8, 0x3, 0x7fff, 0x1}) listen(r1, 0x10003) socket(0x15, 0x800, 0x7) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:28:56 executing program 3: r0 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000001480)={0x7, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "51509bca"}, 0x0, 0x0, @userptr}) r4 = dup(0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r5, &(0x7f0000000140)={0x80000, 0x11, 0x1}, &(0x7f0000000240)='./file0\x00', 0x18, 0x0, 0x12345}, 0x407) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x0) poll(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0xfffffffe, @remote}, 0x80, 0x0}}], 0x1, 0x4000010) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 07:28:56 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) get_robust_list(r0, 0x0, &(0x7f0000000300)) r1 = perf_event_open(&(0x7f000001d000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x10606, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() syz_open_procfs(0x0, &(0x7f0000000040)='timers\x00') ptrace$setregset(0x4205, r0, 0x3, &(0x7f0000000480)={&(0x7f00000003c0)="322c00b1076073b5800553f7ded514bc20e8d576f858aa30602f30943441a01b707c631cb22dfaef366ef5dd5e9a3acbb871514a0b219911808ba3605ffb97cf9597e46d5d4d94cb718293df257d049551dd3aa730c918f96ac4e044e912ae3476e12ce9e8fee3a951e027bb78d5f527f916e9003ae870cb7359c77465a1ce9cc73e1ce1a309797182b257df6d59293c", 0x90}) sched_setscheduler(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x5, 0x9, 0x1, 0x36, 0x0, 0x6, 0x8880, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x6, 0xfffffffffffeffff}, 0x40000, 0x3fffffff80, 0x200000, 0x7, 0x1da, 0x800, 0x3206, 0x0, 0x7, 0x0, 0x2}, r2, 0x0, r1, 0x1) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x7, 0x8, 0x1f, 0x0, 0xbc3c, 0x41080, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x1, 0x5}, 0xd48, 0x400, 0x8, 0x1, 0x81, 0x200, 0x6, 0x0, 0x9}, 0xffffffffffffffff, 0xb, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8030008, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559"}, 0x28) [ 585.424222][T23029] ubi0: attaching mtd0 [ 585.446756][T23029] ubi0: scanning is finished [ 585.613029][T23029] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 585.624852][T23029] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 585.650683][T23029] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 585.767808][T23029] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 585.828219][T23029] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 585.843163][T23029] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 585.861701][T23029] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 585.894883][T23029] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 585.993393][T23040] ubi0: background thread "ubi_bgt0d" started, PID 23040 [ 586.001294][T23032] ubi0: detaching mtd0 [ 586.021846][T23032] ubi0: mtd0 is detached [ 586.047606][T23029] ubi0: attaching mtd0 [ 586.053309][T23029] ubi0: scanning is finished [ 586.262052][T23029] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 587.990501][T23060] chnl_net:caif_netlink_parms(): no params data found [ 588.070826][T23060] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.080277][T23060] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.088870][T23060] device bridge_slave_0 entered promiscuous mode [ 588.100773][T23060] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.108049][T23060] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.116239][T23060] device bridge_slave_1 entered promiscuous mode [ 588.146227][T23060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.160589][T23060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.207962][T23060] team0: Port device team_slave_0 added [ 588.217245][T23060] team0: Port device team_slave_1 added [ 588.254752][T23060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.263134][T23060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.291117][T23060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.304590][T23060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.312951][T23060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.339111][T23060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.385463][T23060] device hsr_slave_0 entered promiscuous mode [ 588.394173][T23060] device hsr_slave_1 entered promiscuous mode [ 588.511739][T23060] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.518828][T23060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.526229][T23060] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.533364][T23060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.593692][T23060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.611238][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 588.619918][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.629451][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.639169][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 588.656510][T23060] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.671418][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 588.679942][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.687090][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.701219][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 588.709915][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.717233][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.740887][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 588.749538][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 588.763091][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 588.777755][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 588.791310][T23060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.803752][T23060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 588.812892][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 588.838519][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 588.846176][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 588.863310][T23060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.935672][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 588.960990][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 588.969290][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 588.979226][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 588.987877][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 589.003354][T23060] device veth0_vlan entered promiscuous mode [ 589.019332][T23060] device veth1_vlan entered promiscuous mode [ 589.047927][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 589.063425][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 589.071572][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 589.081572][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 589.093363][T23060] device veth0_macvtap entered promiscuous mode [ 589.106336][T23060] device veth1_macvtap entered promiscuous mode [ 589.126555][T23060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 589.137615][T23060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.148132][T23060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 589.158750][T23060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.168832][T23060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 589.180316][T23060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.190310][T23060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 589.200898][T23060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.212049][T23060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.221878][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 589.230823][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 589.239397][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 589.251199][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 589.263189][T23060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 589.274154][T23060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.284887][T23060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 589.296118][T23060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.306165][T23060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 589.316694][T23060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.326666][T23060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 589.337399][T23060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.347382][T23060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 589.358821][T23060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.370144][T23060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.379320][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 589.389247][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.505603][ T757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.513905][ T757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.535198][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 589.574028][ T8109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.586027][ T8109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.608088][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 589.734948][T23413] dlm: no locking on control device [ 589.778706][ T22] Bluetooth: hci0: command 0x0409 tx timeout 07:29:01 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="06000000000000002e2f66696c653000f9c8d91fcb0d57b6b019d54b86618735f1a9b6bbe1da73ed21689032f20da0c3a58b5cd1cf24c471c764421cf9d9929f8d"]) perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0x8, 0x20, 0x6, 0xff, 0x0, 0xfffffffffffffe00, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000200), 0x4}, 0x80000, 0x80000000, 0xffff, 0x1, 0x6, 0x1, 0x9000, 0x0, 0x11, 0x0, 0xffffffffffff8000}, 0x0, 0xc, r1, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="b330a88f18c3f1a6a56e06bba466303d613ad7a9778506a0c386f7b1e37bdbb2b09ec37a9fb3f54d0156caf1b0c50b656d1a959598acb9b81ee68fb1c7404c1dde8c4ffe4cce055f53b1bc5ab8db8fe8cd7baab1f270219b9dea71c8a5f074e041d12abad914468b6cbd3a6c5caef5967dd1de741267d9a6d78ff9f3b1b3f482815aa3", 0x83}, {&(0x7f0000000380)="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", 0xfffffffffffffca1}, {&(0x7f0000000780)="06d1ddc6049c2a2dd04ef50d0488d71ad1014cc55cbb8109e6137f965e26a7fb1c2760ec20a1f1d9f91ed181ed114deb1084982dfe2cdf0c338fc524d0b58dd48cd6680600000083aaffea087206f2868656ab8f8a0707eee35e8101248a1560810ddc3989887e9b231404cb93d7292db25bbba8a41581ec8800beab18200eec71954c27233bcc728797187ef2cab3202ecf70fb5ff26935d636c60c409f07e6accaa5b7b398d703e865d4398dae698d0b8404dc5196483fe7126c5978c0e9971a1ed29a93840f7887b6cb19ae23076829f1e2f64564f8b92ac00320b24a68a4e992ad3ee3a9ac2cf0dc522196fb94112ed9886011f599ed644f00a77e80fefc4b363a9284a3bb3b160404d3a7deee01b53bcc9c535cf088b5b8befc7ea2d7e7058e5c5fcb1e92094cc58a07086093bb050c38740eb7a99acfbbfdecc36a425f57b307802beee9a2a98035a923211d3de1665abc67e96659707404a5e0b9f04937e2ab28aeb8dbc991ed21"}], 0x2}, 0x20040814) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000001000000180000005469e2eac280922bf1233607c9311923abee378624f7c4e1792586ecbc3887e8b2ae80c3357ee92193e19d6fc2d0adabe81310586cd68a884919d9fd445cde4b", @ANYRES32=r3, @ANYBLOB="434a29a2000000002e2f660600653001cd4c41b050a601dfe63f7d1a2d088bd1a9f8628e32dbe1e1988cb8f9b5fbda9a76d9bafc5e1ea54e92caf11ba424414572efa07af930078d245f1a9731b0d1a0798925f9a85d705f86d1e8febe1578372492cb8f27cd92d408000000302750fb0d6926616bf04e5ef8f39664ae038900000000785aa132e080609a84b7dd60ed11ffe0973c5c48170ae267389e7a5eb3ff1234af3696fa332c67b94cf81e4203c8597f08cb320d6232cc32d3c1c132ff835b1b80363a4fea5f1fe497510591145ae90d4f05011f99a813f180b5d8373e838623f3f56e68"]) setsockopt$WPAN_WANTACK(r4, 0x0, 0x0, &(0x7f0000000240), 0x4) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) getpid() ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000080)=0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20d7e, 0x0) write$nbd(r6, &(0x7f0000000000)={0x6000000, 0x0, 0x0, 0x0, 0x2, "a309ff0f00005f56d3adffee27873d099cbab35a2fdbede577c78984607d768abafbd0979d0100500000bb02f6b7807e5dadca473f0080000000000000000000000000001500f81e79ab59fc73c6a880bcb1765e00010000"}, 0x68) setsockopt$inet6_tcp_buf(r6, 0x6, 0x21, &(0x7f00000000c0)="7662d42b37fe82a3da8dffa385ab03731d944e4f285b94231c8f0ed865667c83747f160965aa340f11ee65df4fef3aef26a84eaffae3749939c1d498095652e91e8e7e9fd29227dc54eb089ca49d431965513dfa9efb21aca61ccfc3adcf4120", 0x60) r7 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) ioctl$BTRFS_IOC_QUOTA_RESCAN(r7, 0x4040942c, &(0x7f0000000140)={0x0, 0x8000, [0x3, 0x0, 0x40, 0x5, 0x5, 0x5]}) 07:29:01 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) r1 = socket(0x10, 0x803, 0x0) r2 = signalfd(r1, &(0x7f0000000080)={[0x5]}, 0x8) sendto$inet(r2, &(0x7f0000000240)="10623b3c62a65c9535f9961a00524ed863b04232efd19df78e97e809a8787b3ddef48dd6c40b1926458ba5eb459492bfe6a88adc56adeea83b2c7e467d455b9fed747ba8be3de07e8539c886c05b33f1dfe4bb29c2a300a061f7cea540c6e5df7357f020f8c554905503862c8589c6009e07a94f7d3473afdaee14c89275224dcece7589ce723fe9d20f11c0fca5f1a9c6e1eb900c3a9927d8a694eb0bbdc2b133b508eda65039a4fb8db2d2facfd21b8957267a793bf008b31f06346127d2c0", 0xc0, 0x20000000, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "ec30aca05807905b", "d4655f5ce99f97a32119dc20627f25db", "4eb0ccc3", "bb35374e6464fe4d"}, 0x28) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a, @rand_addr, 0x900}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x7115}, 0x1100) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 07:29:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0x9f0000, 0x2, 0x5, r0, 0x0, &(0x7f0000000080)={0x990af6, 0x100, '\x00', @p_u32=&(0x7f0000000000)=0xffff}}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) ioctl$I2C_SLAVE_FORCE(r1, 0x706, 0x3c9) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xf}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6808890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x2dd}], 0x3, 0x0, 0x0, 0x1a0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1, 0x0, 0xfffffffffffffc7a}}], 0x2, 0x24004880) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000040ac053002000000000600000000000000000000090400000003000200092100000001220000090581030000000000"], 0x0) msgget(0x1, 0x200) 07:29:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x2, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) getsockname$qrtr(r2, &(0x7f0000000040), &(0x7f0000000140)=0xc) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000280)=0x6, 0x4) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='xen_cpu_load_idt\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:29:01 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/cgroup.procs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) r4 = perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r4, 0x0, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @mcast2}, 0xbe, 0x0, 0x0, 0x0, 0x3}}], 0x1, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cgroup.freeze\x00', 0x275a, 0x0) io_uring_enter(r5, 0x0, 0x9e97, 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x34c33000) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000100)={0x7, 0x7be, {0xffffffffffffffff}, {}, 0x1, 0x6}) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xe1, 0xff, 0x59, 0x0, 0x0, 0x80000000, 0x11104, 0x6, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc6, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x1c040, 0x3, 0x2, 0x8, 0x10000, 0x8fc, 0x1, 0x0, 0x8, 0x0, 0xfffffffffffffff7}, r6, 0x3, 0xffffffffffffffff, 0x8) 07:29:01 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/mtd', 0x14180, 0x20) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/214, 0xd6) open(&(0x7f0000000100)='./file0\x00', 0x2ca003, 0x4) [ 589.935167][T23410] dlm: no locking on control device [ 590.084453][T23426] ubi0: attaching mtd0 [ 590.125130][T23426] ubi0: scanning is finished [ 590.346520][T23426] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 590.372019][T23426] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 07:29:01 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x883}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000007c0)) close(r0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='+/\x7f)$)\x00', 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000280)={'fscrypt:', @desc1}, 0x0, 0x0, 0xffffffffffffffff) request_key(0x0, &(0x7f00000001c0)={'syz', 0x3}, 0x0, r1) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x3c, 0x925381) open(&(0x7f0000000040)='./file0\x00', 0xc68c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)) sendfile(0xffffffffffffffff, r2, 0x0, 0x20000000011f04) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x3, 0x8, 0x5b3, 0x4000000, 0x5}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x10, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x800000021, 0x87}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0x4000000000000009, 0xffffffffffffffff, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8, 0x12, r4, 0x0) [ 590.416025][T23426] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 590.464515][T23426] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 590.505485][ T7] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 590.576294][T23426] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 590.683949][T23426] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 590.729390][T23426] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 590.746292][ T26] audit: type=1804 audit(1638689342.281:42): pid=23458 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir216203689/syzkaller.GhvpTC/137/file0" dev="sda1" ino=13917 res=1 errno=0 07:29:02 executing program 2: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket(0x0, 0x0, 0xfd) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x4000000000000081) getsockname$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x2f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, '.\x00'}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0xb2400, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}}, 0x0) [ 590.839971][T23426] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 590.862361][ T7] usb 6-1: no configurations [ 590.868894][ T7] usb 6-1: can't read configurations, error -22 [ 590.914482][ T26] audit: type=1804 audit(1638689342.401:43): pid=23456 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir216203689/syzkaller.GhvpTC/137/file0" dev="sda1" ino=13917 res=1 errno=0 [ 590.966324][T23434] ubi0: detaching mtd0 [ 590.966670][T23450] ubi0: background thread "ubi_bgt0d" started, PID 23450 [ 591.003989][T23434] ubi0: mtd0 is detached [ 591.015480][T23441] ubi0: attaching mtd0 [ 591.023253][T23441] ubi0: scanning is finished [ 591.085589][ T7] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 591.223682][T23441] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 591.267336][T23470] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:29:02 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}, 0x200, 0xd2f9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4000, 0x0, 0xfffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x19, r1, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xc}, 0x10, 0xf021, r2}, 0x78) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000380)=""/214, 0xd6, 0x40012160, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 591.366720][ T7] usb 6-1: no configurations [ 591.371767][ T7] usb 6-1: can't read configurations, error -22 [ 591.408824][ T7] usb usb6-port1: attempt power cycle [ 591.427974][T23473] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 07:29:03 executing program 2: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x1d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x40000, 0x10, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev_mcast\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @any, 0x8ea}, 0xe) r2 = open(&(0x7f0000000000)='./bus\x00', 0xe0042, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x0, 0xffffffff}) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) sendmmsg(r1, &(0x7f0000000b80), 0x40002d2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x98100, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000240)=0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x0, 0x5, 0x40}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r4, &(0x7f0000000000)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) connect$ax25(r4, &(0x7f0000000080)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) [ 591.522162][T23475] ubi0: attaching mtd0 [ 591.560879][T23475] ubi0: scanning is finished [ 591.783869][T23475] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:29:03 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x501602, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 591.855571][ T7] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 591.856479][ T135] Bluetooth: hci0: command 0x041b tx timeout [ 591.985849][ T7] usb 6-1: no configurations [ 591.990653][ T7] usb 6-1: can't read configurations, error -22 07:29:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000380)=0xfffffffc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00000001c0)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, "4f974974d2a632be", "3392766decbda4b8a1e204e4e560b928", "0e380795", "e57caddc916ca8d9"}, 0x28) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f00000000c0)=0x2c00000, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x280000c, 0x10012, r3, 0x0) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) accept4$ax25(r4, 0x0, 0x0, 0x80000) [ 592.114579][T23490] ubi0: attaching mtd0 [ 592.150988][T23490] ubi0: scanning is finished 07:29:03 executing program 4: inotify_init1(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x2, 0x3, 0x3) connect$rds(r0, &(0x7f0000000700)={0x2, 0x0, @dev}, 0xf) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3}, 0x0, 0xdffffdffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xb, 0x1d, 0xcc, 0x3, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) rmdir(&(0x7f0000000040)='./file0\x00') sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@dellink={0x60, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x814}, [@IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_to_bond\x00'}, {0x14, 0x35, 'ip_vti0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'netdevsim0\x00'}]}, 0x60}}, 0x0) [ 592.186234][ T7] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 592.335978][ T7] usb 6-1: no configurations [ 592.340971][ T7] usb 6-1: can't read configurations, error -22 [ 592.351616][T23490] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 592.376245][ T7] usb usb6-port1: unable to enumerate USB device [ 592.386035][T23490] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 592.397738][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 592.412422][T23490] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 592.451052][T23490] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 592.488163][T23501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.531248][T23490] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 592.583257][T23501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.607555][T23490] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 592.628504][T23501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.639960][T23490] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 592.658259][T23501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.678664][T23490] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 592.742325][T23497] ubi0: background thread "ubi_bgt0d" started, PID 23497 [ 592.753013][T23491] ubi0: detaching mtd0 [ 592.784217][T23491] ubi0: mtd0 is detached [ 592.815455][T23490] ubi0: attaching mtd0 [ 592.822511][T23490] ubi0: scanning is finished 07:29:04 executing program 5: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0xfd000004, &(0x7f00000004c0)="b91803b700030703009e40f005dd1fff060000000000008477fbac141434e0000001c699da153f13e0e6e380f60105f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x107180, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0x300, 0x70bd29, 0x25dfdbfd, {0x2, 0x10, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0xd}, [""]}, 0x1c}}, 0x801d) 07:29:04 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37313332313635343500"/192, 0xc0, 0x400}, {&(0x7f0000000040)="000000000000000000000000f2a953140c764271ad9be301789147cf010040000c00000000000000d1f4655f00000000000000000000000000000000000000009375bbd1ed10fe5663e58622d650f70a3ae205a8fd75dd1c283ef46843f9a6d2e381fba3bde3fc8bb71f1404b816f482aa0e53fd2cab0d37bbddccea777c801e76c2d6b2bc81a732d9087f62209cd19b467e688549769d132bdf8ecdb9ccb7476dab5459d05af836f074fffe1db825fda06985", 0xb3, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000fffffffffffffffffffffffffffffffeffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff86e9ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff04000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff01000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d1f4655fd1f4655fd1f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d1f4655fd1f4655fd1f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000e85575eae85575ea00000000d1f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404d1f4655fd1f4655fd1f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d1f4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000d1f4655fd1f4655fd1f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x65}, {&(0x7f0000011100)="20000000000000000000000000000000d1f4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000d908479700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000d1f4655fd1f4655fd1f4655f00000000000001002000000000000800010000000af30100040000000000000000000000020000005000000000000000000000000000000000000000000000000000000000000000000000000000000090dc20e700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3731333231363534352f66696c65302f66696c65300000000000000000000000000000000000000000000009d0860300000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="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", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9bfd}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffd1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012a00)) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x6) [ 593.198888][T23490] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:29:04 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000001eb2fc96140001000000000000000000dd670c000400000085000000081d0000950000000000000000d6d3583d078049801307e453efc76a"], &(0x7f0000000140)='syzkaller\x00', 0xffffff81, 0xda, &(0x7f0000000380)=""/218, 0x40f00, 0x1f, '\x00', 0x0, 0xe, r1, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x9, 0xffffff80, 0x7}, 0x10, 0x0, r2}, 0x78) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:29:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x98, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x68, 0x14, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x851) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x3) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) getpid() perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x800, 0x6, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x3}, 0x0, 0x4, r1, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x16, &(0x7f0000002700)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) sched_setscheduler(0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfec8) [ 593.508824][T23526] ubi0: attaching mtd0 [ 593.553161][T23526] ubi0: scanning is finished [ 593.898429][T23526] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 593.954838][ T22] Bluetooth: hci0: command 0x040f tx timeout 07:29:05 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x180, &(0x7f00000002c0), &(0x7f00001e7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x16b847409187de28, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 07:29:05 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) preadv(r1, &(0x7f0000000600)=[{&(0x7f0000000300)=""/159, 0x9f}, {0x0}], 0x2, 0x0, 0x0) dup3(r0, r1, 0x80000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xe990) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000440)={0x0, [], 0x5, "a59f7995f969f9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xe535, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x80, 0xd, 0xfa, 0x0, 0x200, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x7fffffff, 0x8}, 0x18000, 0x8000, 0x3bdb, 0xb, 0x10001, 0x1, 0x8, 0x0, 0x2ef4, 0x0, 0x2}, 0xffffffffffffffff, 0xa, r3, 0x0) 07:29:05 executing program 2: syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x121, 0x10000}], 0x0, &(0x7f0000020400)) 07:29:05 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x641ead4760072f9, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:29:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000000680)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESDEC, @ANYRES32=r0, @ANYRESDEC=r0]) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x9) socket$inet6(0xa, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) mkdirat(r1, &(0x7f0000000980)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x24012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x6abc06d02bb3d160}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x1) umount2(&(0x7f00000009c0)='./file0\x00', 0x5) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f00000005c0)=""/162) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000780)=""/234) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) syz_mount_image$jfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x101, 0x1, &(0x7f0000000580)=[{&(0x7f0000000880)="5147439c8fe2eb5ff78913cd772a9c763c5f8520b768c6971cf862e5e39d8baf743b5f5dd17330758f5934029a3e87edb14987666b6b8fcc98531511adbcd43b424c2165d3d4c9254f5aebc270bcfb44e58fe642a4219a19e1b19e7a2aefc4a0998246eb1bbeceab1672b46e7fee24b6142bd0b672eeecef128018ffd94978497210e5351643b40de7174bfb45d2411bfb1e7860c69aff6459e38bd33a4453de05e03ecbb9d918c18459cd2c1b7c2a1fee5270c030007223536967b452152f60a21e", 0xc2, 0x80}], 0x80, &(0x7f00000006c0)={[], [{@permit_directio}, {@dont_appraise}, {@uid_lt={'uid<', r3}}]}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0xe98}}, 0x0) [ 594.429183][T23545] ubi0: attaching mtd0 [ 594.450592][T23544] loop5: detected capacity change from 0 to 4096 [ 594.460851][T23546] loop2: detected capacity change from 0 to 256 [ 594.474531][T23545] ubi0: scanning is finished [ 594.497981][T23544] EXT4-fs (loop5): Unrecognized mount option "18446744073709551615ÿÿÿÿ18446744073709551615" or missing value [ 594.675618][T23465] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 594.692197][T23546] loop2: detected capacity change from 0 to 256 07:29:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000440)="eb3c8f000000732e01007400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x2814414, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48c60, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x4200, 0x0, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 594.827093][T23545] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 594.895644][T23545] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 07:29:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000000000)={0x0, 0xb, 0x2, @tid=r0}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000140)={{r4, r5+10000000}, {0x77359400}}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x10000000, 0x1, 0xfff, 0x7, 0x81, 0x8000, 0x8, 0xffffffc0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x0, 0x0) ptrace$setsig(0x4203, r7, 0x1f, &(0x7f00000000c0)={0x0, 0x9, 0x101}) [ 594.945293][T23545] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 594.975879][T23545] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 595.015558][T23545] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 595.038868][T23578] loop2: detected capacity change from 0 to 262160 [ 595.053077][T23545] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 595.053154][ T8109] device hsr_slave_0 left promiscuous mode [ 595.101311][ T26] audit: type=1800 audit(1638689346.632:44): pid=23578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048735 res=0 errno=0 [ 595.124556][ T8109] device hsr_slave_1 left promiscuous mode [ 595.124739][T23545] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 595.141187][ T8109] device bridge_slave_1 left promiscuous mode [ 595.155817][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.191190][ T8109] device bridge_slave_0 left promiscuous mode [ 595.207784][T23545] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 595.223239][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state 07:29:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="240600000a0a030000000000000000b360630a00080004400000007908000a4000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}]}, 0x6c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) pivot_root(&(0x7f0000000340)='./file0\x00', 0x0) [ 595.265156][T23568] ubi0: background thread "ubi_bgt0d" started, PID 23568 [ 595.272384][T23550] ubi0: detaching mtd0 [ 595.277975][ T8109] device veth1_macvtap left promiscuous mode [ 595.280821][T23550] ubi0: mtd0 is detached [ 595.292757][ T8109] device veth0_macvtap left promiscuous mode [ 595.319908][ T8109] device veth1_vlan left promiscuous mode [ 595.327036][T23556] ubi0: attaching mtd0 [ 595.332567][T23556] ubi0: scanning is finished [ 595.365248][ T8109] device veth0_vlan left promiscuous mode [ 595.491378][T23556] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:29:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, 0xa, 0x0, 0x24}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="bbbfb954089b5cf225e23f420f2b05ee2e13faa74b9adeafaa1d23cfe34135e834a49cd49324cc0bad9ba6003a222f4eeb0db852", 0x34}], 0x1, 0x0, 0x0, 0x44800}, 0x4000000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 595.683517][T23597] ubi0: attaching mtd0 [ 595.697821][T23597] ubi0: scanning is finished [ 595.825128][T23597] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 595.839611][ T26] audit: type=1800 audit(1638689347.372:45): pid=23586 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048735 res=0 errno=0 [ 595.886292][T23597] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 595.914214][T23597] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 595.933237][T23597] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 595.947625][T23597] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 595.959736][T23597] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 595.971468][T23597] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 595.994385][T23597] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 596.010866][T23602] ubi0: background thread "ubi_bgt0d" started, PID 23602 [ 596.010886][T23598] ubi0: detaching mtd0 [ 596.025752][T11212] Bluetooth: hci0: command 0x0419 tx timeout [ 596.054594][T23598] ubi0: mtd0 is detached [ 596.071423][T23597] ubi0: attaching mtd0 [ 596.083978][T23597] ubi0: scanning is finished [ 596.187189][T23597] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:29:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x2, 0xbf, 0x1, 0x8, 0x0, 0x10000, 0x10000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x100000000, 0xc3d8}, 0x20000, 0xffff, 0x9, 0x8, 0x2, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r3, 0x9) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:29:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, &(0x7f0000000380)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005f100)={0x0, [], 0x0, "b67d5166ab9c79"}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xd0) getpid() sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x300}}) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r3, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xf}, 0x0) [ 596.418178][T23616] ubi0: attaching mtd0 [ 596.446347][T23616] ubi0: scanning is finished [ 596.620874][T23616] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 596.638989][T23616] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 596.664384][T23616] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 596.690927][T23616] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 596.720224][T23616] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 596.746567][T23616] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 596.774037][T23616] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 596.804982][T23616] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 596.830265][T23622] ubi0: background thread "ubi_bgt0d" started, PID 23622 [ 596.844496][T23617] ubi0: detaching mtd0 [ 596.852180][T23617] ubi0: mtd0 is detached 07:29:08 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2, 0x1000000}}, './file0\x00'}) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x19, 0x0, 0x0, 0x4, 0x0, 0xffffffff00000000, 0xd5008, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x401, 0x7fff}, 0x301a, 0x800, 0x1f, 0x6, 0x9, 0x2, 0x3ff, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x1, r2, 0x8) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140)={0x8914f300}, 0x4) listen(r1, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 596.993162][T23626] ubi0: attaching mtd0 [ 597.006955][T23626] ubi0: scanning is finished [ 597.109187][T23626] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 597.119475][T23626] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 597.141051][T23626] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 597.169665][T23626] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 597.188350][T23583] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 597.210149][T23626] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 597.237950][T23626] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 597.264396][T23626] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 597.297334][T23626] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 07:29:08 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe29) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82001, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, &(0x7f0000000040)=0x8) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 597.338294][T23629] ubi0: background thread "ubi_bgt0d" started, PID 23629 [ 597.351505][T23626] ubi: mtd0 is already attached to ubi0 [ 597.367739][ T8109] team0 (unregistering): Port device team_slave_1 removed [ 597.456619][ T8109] team0 (unregistering): Port device team_slave_0 removed [ 597.494774][T23634] ubi: mtd0 is already attached to ubi0 [ 597.536841][T23634] ubi0: detaching mtd0 [ 597.568274][T23634] ubi0: mtd0 is detached [ 597.590876][T23634] ubi0: attaching mtd0 [ 597.611346][T23634] ubi0: scanning is finished [ 597.772421][T23634] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 598.144115][T23578] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 598.162991][T23586] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 601.580801][T23666] chnl_net:caif_netlink_parms(): no params data found [ 601.773370][T23666] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.782227][T23666] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.790728][T23666] device bridge_slave_0 entered promiscuous mode [ 601.800798][T23666] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.809524][T23666] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.818028][T23666] device bridge_slave_1 entered promiscuous mode [ 601.853227][T23666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.869917][T23666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.916767][T23666] team0: Port device team_slave_0 added [ 601.927816][T23666] team0: Port device team_slave_1 added [ 601.967400][T23666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.974508][T23666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.004374][T23666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.019887][T23666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.028162][T23666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.061734][T23666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.144017][T23666] device hsr_slave_0 entered promiscuous mode [ 602.152790][T23666] device hsr_slave_1 entered promiscuous mode [ 602.168537][T23666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 602.188770][T23666] Cannot create hsr debugfs directory [ 602.411963][T23666] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.419106][T23666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.426562][T23666] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.433649][T23666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.513043][T23666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.539349][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 602.554075][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.569995][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.582312][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 602.604802][T23666] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.620509][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 602.630824][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 602.639824][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.646990][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.665342][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 602.674130][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 602.684288][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.691452][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.700421][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 602.729093][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 602.739432][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 602.749847][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 602.759306][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 602.769104][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 602.789418][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 602.798848][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 602.808934][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 602.825250][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 602.833770][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 602.845902][T23666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 602.875186][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.882667][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.907623][T23666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.041206][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 603.059979][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 603.091079][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 603.100770][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 603.113521][T23666] device veth0_vlan entered promiscuous mode [ 603.121794][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 603.132491][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 603.150269][T23666] device veth1_vlan entered promiscuous mode [ 603.186929][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 603.197421][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 603.207226][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 603.217237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 603.230401][T23666] device veth0_macvtap entered promiscuous mode [ 603.247301][T23666] device veth1_macvtap entered promiscuous mode [ 603.272040][T23666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 603.282644][T23666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.294129][T23666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 603.305810][T23666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.314715][ T22] Bluetooth: hci1: command 0x0409 tx timeout [ 603.324687][T23666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 603.342162][T23666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.353998][T23666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 603.372485][T23666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.386606][T23666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.396085][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 603.404260][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 603.417770][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 603.427425][ T7885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 603.440087][T23666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 603.452990][T23666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.465494][T23666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 603.476674][T23666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.487568][T23666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 603.502620][T23666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.521786][T23666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 603.533198][T23666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.558101][T23666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 603.578590][T23666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 603.593628][T23666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.612798][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 603.632408][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 603.797479][ T8109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.821693][ T8109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.895155][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 603.917931][T13467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.932228][T13467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.958918][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 604.104345][T24009] hub 9-0:1.0: USB hub found [ 604.123606][T24009] hub 9-0:1.0: 8 ports detected 07:29:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7eda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x8188aea6, &(0x7f00000003c0)={"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"}) 07:29:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) r3 = socket$rxrpc(0x21, 0x2, 0xa) recvmsg(r3, &(0x7f0000000300)={&(0x7f0000000280)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/230, 0xe6}, {&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000680)=""/86, 0x56}, {&(0x7f0000000700)=""/150, 0x96}, {&(0x7f00000007c0)=""/244, 0xf4}, {&(0x7f00000008c0)=""/239, 0xef}, {&(0x7f0000000140)=""/28, 0x1c}], 0x9}, 0x10002) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:29:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2, 0x2, 0xff, 0x2, 0x0, 0x9a1e, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_config_ext={0xcb8, 0x400}, 0x40001, 0x101, 0xee10, 0x6, 0x1, 0x2c3, 0x3, 0x0, 0x407d, 0x0, 0xfffffffffffffeff}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000001}) r2 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, r2, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000040)=ANY=[]) r3 = open(0x0, 0x0, 0x0) flock(r3, 0x2) sendto$inet6(r3, &(0x7f0000000000)="347e816fb5155e4b379e1238681c7859748dac9096470bd42cc2656c79", 0x1d, 0x20000880, &(0x7f0000000180)={0xa, 0x0, 0x1, @empty, 0x8000}, 0x1c) r4 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000240)={0x6}) vmsplice(r0, &(0x7f0000000740)=[{&(0x7f0000000340)="36b07b24778bd322ad4b8e741f34f701f922f74598ab95eb6710d9a1bc1b990bc7597a4c0ab0e6809bc37f42aa1abbed5c6f12fc962cf85858e69baf07fea83f57d43415b00a1f202e3ff18ca94857e12d9c6784cde4c242d5331c8279ff6b75aa51890e1fda4d"}, {&(0x7f00000003c0)="9042f42f8fc1315f1d86572d4a6460895ef36ea6a73fe1486c49a2f0c1b7726c14d528ab830addfb470626823075857726aadee91f47c52d306e9620eb03d226a2499bade7a173996d602618450ff593c84e572f4c03b32a4498e06e07cfa8b86a941687f4f65140ee21acb292a7be6eaa88e71c71daaee8dd3c20751ea90ad8049c65d7505bdb4046363b7d65bd847cf41df51b47d1d5b695e35dbff48712a4b1422a66ea167d7d52f63445789cacad944e7e7570e049d3367ba829747fa056a44e8922ca6770e5ad506dd51c07bbdf5ce38e3a7267b1f0"}, {&(0x7f00000004c0)="541476bd5d60291446754955f2234f1a36832e9069e1dd52f76cddbf977ee0f9422493199c9f52cc02584b36b72cb10a63c9b763bf9d783ecb5497a874d932603b11f90deed30f9b305b091193c948b9348bb75e912ab9b652cc11f2639b0cd506a859810ca7d6a7d7f6066f6b93081a82167ea1ed16b1992c901ecc6306a17f0f80522842afe829607a33"}, {&(0x7f0000002080)="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"}, {&(0x7f0000000580)="ae912fa2462a76ec1caf94c0dc3ce3bc74dc1911212c48e8ea51cca90d3dbcc9d962c0a23be23aa6721894611d280804050824fc42e64191712d4fb0da954802278eebc87ee6902c24193f90f543b943b6d5b3078243894cb38dd3b2b2da5110ba017fddd438f4ddfcca3b6aae6e7cee9e7d959024781e3d5712bc90f77b10db61f2744fa49033498e864f05efd71fb77a56c9abad3a8e8768edad2b1c74e52681f8e8d21fd1fd1dc93c"}, {&(0x7f0000000640)="2e682011efceca2967588ffcc3f48977c306ee447d249ccb7615d9ac40e4343b77e8d0c7b3504b738dffea4f40c029ce0a127a5dd456de0b50eb56ddd567fbe2022582ccb6ec3e301ccce65aaea00c866c54391fe718c4ae8ee0dbe1d61308d74389ac7467a1f82c66f1cd67ca56918fb8fdcf97d720ea5ea05529f362616f3f690cad6c3291433474f21dedc34ce2a7d056db0bdd698ac56ed0a52d7a7a1698c10cdae5d7d3f8b56d3631a795f29238bb2953a6ae22225b88c69128a923bf7525c974"}], 0x55, 0x1) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0xfe, 0x8e, 0x6, 0x6, 0x0, 0x6, 0x8, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6e301d35, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x2, 0xff, 0x180, 0x9, 0x6, 0x61, 0x3f, 0x0, 0x5, 0x0, 0x6}, 0x0, 0x2, r3, 0x8) r5 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0xd51, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) write(0xffffffffffffffff, &(0x7f0000000980)="ec0428810837743baf4e81f8f2a49a88a9a8a683b37e725640b457bee72f33945b7ab83d1141469e343fc0ac9e950624844081cb3404116a18f35333faf185c1063ed5af9789507c523ca27ebff1352d12edaca39aeaf17c5365856b2e1c32ae6c1b32d3f0981243bedcd5b729fdb33c6e8da03af101b49cd36864b5771c9c6874f37512ec37d9662fcc6bac227dd6c3c984cac4874a2e2697499f4f72ed1d3730f3c3757410408a6ad3", 0xaa) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r5, 0x2ff, 0x0, 0x0, 0x0, 0x0) 07:29:16 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf2) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x6e820, 0xfffffffa}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001ac0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001b80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)=@getqdisc={0x24, 0x26, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x10, 0x8}, {0x2, 0x1}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000001) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x71, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', r3, 0x2f, 0x81, 0xa, 0x0, 0x24, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x20, 0x6}}) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x753e, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000100)=0x10001) dup3(r7, r8, 0x80000) 07:29:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x9, 0x8d}, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000b00)={0xa, 0x0, 0x0, @mcast2}, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x18, 0x2, 0x81, 0xec2, 0x7f, 0x8, 0x4, 0x500}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000080)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {0x0, 0x0, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[]) gettid() syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000940), 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0x0) [ 604.939928][T24019] ubi0: attaching mtd0 [ 604.964007][T24019] ubi0: scanning is finished 07:29:16 executing program 1: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x1, 0x0, 0x13, 0x0, 0x0, 0x4105, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x0, 0x3}, 0x2010, 0x0, 0x0, 0x9, 0x100000001, 0x4, 0x40, 0x0, 0x6, 0x0, 0x5}, r0, 0x3, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1ed, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x1}, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) set_mempolicy(0x0, &(0x7f0000000240)=0x8, 0xfffffffffffffffe) getpid() io_setup(0x4, &(0x7f00000004c0)=0x0) openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x16c) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r5, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r4, &(0x7f0000000000)="98", 0x3e80000000}]) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x194cbc7a9f38437f, &(0x7f0000ffc000/0x4000)=nil) 07:29:16 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='#! ./f'], 0x191) prctl$PR_SET_PTRACER(0x59616d61, r0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getown(r2, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x40, 0x3, 0x4, 0x80, 0x0, 0x3, 0x321ac, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0x1000, 0xd0, 0x101, 0x0, 0x7ff, 0xf0000000, 0xfff7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, r1, 0x2) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000000)) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000002100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000002180)="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", 0x2000, &(0x7f0000001240)={&(0x7f0000000340)={0x50, 0x0, 0x7fff, {0x7, 0x23, 0xfff, 0x800012, 0x8000, 0x6, 0x1}}, 0x0, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0x1000}}, &(0x7f0000000240)={0x18, 0xffffffffffffffda, 0x5, {0x9}}, &(0x7f00000003c0)={0x18, 0x0, 0xb67d}, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x80000001, {0x6}}, &(0x7f0000000500)={0x14, 0x0, 0x4, {'#[*\x00'}}, &(0x7f0000000540)={0x20, 0x0, 0x6, {0x0, 0xa}}, &(0x7f0000000580)={0x78, 0x0, 0x0, {0x8, 0x60a, 0x0, {0x0, 0x100000000, 0x9, 0x7fffffff, 0x400, 0x4, 0x0, 0x0, 0x1, 0xc000, 0x5, 0x0, 0x0, 0x0, 0x5}}}, &(0x7f0000000700)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfff, 0x10000, 0x0, 0xfffffffe, {0x0, 0x5, 0x100000000, 0x8, 0x0, 0xfffffffffffffff7, 0x80000001, 0x4, 0x8e, 0xc000, 0x0, 0xee00, 0x0, 0x3, 0x6}}}, &(0x7f00000008c0)={0x40, 0x0, 0x5d, [{0x3, 0x80000000, 0x14, 0x1, 'security.capability\x00'}]}, &(0x7f0000000c80)=ANY=[@ANYBLOB="a004000000000000dd000000000000000500000000000000010000000000000007000000000000000000000000000000730900000200000003000000000000000000010000000000000000000000000000000000000000000600000000000000010400000000000000000000a8feffffffffff7f0010000006000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="00000000060b00000000000000000000000000000000000000000000010000004002000000000000000000000500000000000000010000000000000002000000000000000000000000000000c00000007f000000060000000000000007000000000000009d0000000000000003000000000000000000000000000000ffff0000000000000000000005000000030000000040000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="cf0400000500000000000000050000000000000003000000000000000100000009000000290000000000000002000000000000000000000000000000060000000000000083000000000000000700000002000000000000000000000003000000000000000700000000000000070000000000000040000000000000000700000000000000a6b41832ff0000008c00"/152, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="0600000000000000010000000100000001000000400000000000750000000000040000000000000003005b5cacd65da17a283760e2b405037a000000f50000000000000000000000000000000000000000000040050000ce00000000050000000000000003000000000000007f0e0000000000000500000000000000ceef1515000000000f0b0000ec770000000000000060000005000000", @ANYRES32, @ANYRES32, @ANYBLOB="0100000000000000000000000000000000000000000000000000000001000000800000000000000000000000000000000000000000000000000000000000000000000000ff03000000000000e05a0000020000000300000000000000d9090000000000000400000000000000000000000000000001000000000000002d070000000000000400000006000000000000000080000009000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0b000000ed0000000000000000000000000000000000000001000000140000000100000073656375726974792e6361706162696c6974790000000000000000000000000000000000000000000900000000000000080000000000000008000000000000000000000000000000f8ffffffffffffff0000000000000000010400000000000008000000000000000000000000000000b153000008000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000010000800000000004000000000000000000000000000000140000003f00000073656375726974792e6361706162696c6974790000000000030000000000000000000000000000000500000000000000370600000000000007000000ffffffff0600000000000000010000000000000002000000000000004900000000000000000000000000000002000000000000000900000000040000f40d0000006000005a000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="8b000000008000000000000005000000000000000400000000000000140000000600000073656375726974792e6361706162696c6974790000000000"], 0x0, &(0x7f0000001200)={0x20, 0x0, 0x7, {0x6, 0x4, 0x9, 0x9}}}) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 605.240168][T24019] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 605.272756][T24019] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 605.315125][T24019] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 605.364259][T24019] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 605.384620][ T20] Bluetooth: hci1: command 0x041b tx timeout [ 605.451252][T24019] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 605.530528][T24019] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:29:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') close(r0) ftruncate(r0, 0xe1c) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x2) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000001880)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r0, 0x0, 0x1) [ 605.590384][T24019] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 07:29:17 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x48) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x2710}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) bind(r2, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @local, 'erspan0\x00'}}, 0x80) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2d, &(0x7f0000000000)=0x6, 0x4) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000000)=0x6, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x1f, 0x7fff, 0x7, 0x0, 0x0, [{{r3}, 0x81}, {{r4}, 0x2}, {{r1}, 0x2}, {{}, 0xfffffffffffffffc}, {{r0}, 0x7f}, {}, {{}, 0x400}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="3c00000010001fff0000248f1c872d2b02005bee", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a002615a3053e8c1d1dcb7cc0809e3355eb6151c8b9734fed"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r5 = socket(0x10, 0x80002, 0x0) write$binfmt_elf64(r5, &(0x7f0000001980)=ANY=[], 0x85e) sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 605.643704][T24019] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 605.702840][T24036] ubi0: background thread "ubi_bgt0d" started, PID 24036 [ 605.711018][T24024] ubi0: detaching mtd0 [ 605.723171][T24024] ubi0: mtd0 is detached [ 605.739380][T24019] ubi0: attaching mtd0 [ 605.746090][T24019] ubi0: scanning is finished 07:29:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=@ipv6_getnexthop={0x30, 0x6a, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff6c0000000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00000024000b0ebaffffff0000b8ff00000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000010a0001006e6574656d0000002c0002000000000009ebff00001a000000000000fdff00ff68e30000040005800c000400ebffffff"], 0x5c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x3, 0x4) [ 605.905310][ T22] usb 6-1: new high-speed USB device number 15 using dummy_hcd 07:29:17 executing program 4: r0 = fork() r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000000)={r1}) getpid() close_range(r2, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007c00)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/12, 0xc}, {&(0x7f0000000140)=""/92, 0x5c}, {&(0x7f00000001c0)=""/5, 0x5}, {&(0x7f0000000200)=""/8, 0x8}], 0x4, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000480)=""/208, 0xd0}], 0x2, &(0x7f00000005c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000006c0)=""/149, 0x95}, {&(0x7f0000000780)=""/176, 0xb0}, {&(0x7f0000000840)=""/101, 0x65}, {&(0x7f00000008c0)=""/119, 0x77}, {&(0x7f0000000940)=""/99, 0x63}], 0x5, &(0x7f0000000a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/122, 0x7a}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000bc0)=""/69, 0x45}, {&(0x7f0000000c40)=""/168, 0xa8}], 0x4, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0xf0}}, {{&(0x7f0000000e40), 0x6e, &(0x7f0000001200)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/240, 0xf0}, {&(0x7f0000000fc0)=""/167, 0xa7}, {&(0x7f0000001080)=""/144, 0x90}, {&(0x7f0000001140)=""/183, 0xb7}], 0x5, &(0x7f0000001280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003340), 0x6e, &(0x7f00000043c0)=[{&(0x7f00000033c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004400)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f00000044c0)=""/105, 0x69}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000005540)=""/194, 0xc2}], 0x3}}, {{&(0x7f0000005680)=@abs, 0x6e, &(0x7f0000007b80)=[{&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000007700)=""/33, 0x21}, {&(0x7f0000007740)=""/217, 0xd9}, {&(0x7f0000007840)=""/147, 0x93}, {&(0x7f0000007900)=""/123, 0x7b}, {&(0x7f0000007980)=""/193, 0xc1}, {&(0x7f0000007a80)=""/208, 0xd0}], 0x8}}], 0x8, 0x0, &(0x7f0000007e00)={0x0, 0x3938700}) sched_setattr(r5, &(0x7f0000007e40)={0x38, 0x5, 0x10000024, 0x1, 0x1, 0x1, 0xe07, 0x88b77d4, 0x6, 0x6}, 0x0) sched_setscheduler(r4, 0x3, &(0x7f0000000040)=0x9) [ 606.006989][T24019] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:29:17 executing program 3: perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {0x0}], 0x0, &(0x7f00000000c0)=ANY=[]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0xc030, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r6, r7, &(0x7f0000000240)=0x208, 0x9) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r8, @ANYBLOB="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", @ANYRESOCT=r5], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES16=r8, @ANYBLOB="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", @ANYRESHEX=r2], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000004dac0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004dcc0)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r9}], 0x7, "db8e8df8aba0b8"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005a280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "340429ac71e260"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b280)={0x6eaa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r10}], 0x1f, "7f2d68868866c1"}) 07:29:17 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7b9, 0x32a}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0xfb3, 0x4000, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 606.192031][T24058] device vxlan0 entered promiscuous mode [ 606.206260][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 606.323071][T24076] syz-executor.4: vmalloc error: size 1966080, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 606.354647][ T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.407677][ T22] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.461865][ T22] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 606.472763][T24076] CPU: 1 PID: 24076 Comm: syz-executor.4 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 606.481058][T24084] ubi0: attaching mtd0 [ 606.482765][T24076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.482842][T24076] Call Trace: [ 606.482852][T24076] [ 606.482862][T24076] dump_stack_lvl+0xcd/0x134 [ 606.482909][T24076] warn_alloc.cold+0x87/0x17a [ 606.482945][T24076] ? lockdep_hardirqs_on+0x79/0x100 [ 606.482981][T24076] ? zone_watermark_ok_safe+0x290/0x290 [ 606.483035][T24076] ? __vmalloc_node_range+0x574/0xab0 [ 606.483070][T24076] __vmalloc_node_range+0x883/0xab0 [ 606.483111][T24076] ? vfree_atomic+0xe0/0xe0 [ 606.483148][T24076] ? __snd_dma_alloc_pages+0x50/0x90 [ 606.543847][T24076] __vmalloc+0x69/0x80 [ 606.547946][T24076] ? __snd_dma_alloc_pages+0x50/0x90 [ 606.549129][T24084] ubi0: scanning is finished [ 606.553260][T24076] ? snd_dma_vmalloc_free+0x40/0x40 [ 606.553299][T24076] __snd_dma_alloc_pages+0x50/0x90 [ 606.553338][T24076] snd_dma_alloc_dir_pages+0x14d/0x240 [ 606.573663][T24076] do_alloc_pages+0xc2/0x180 [ 606.578296][T24076] snd_pcm_lib_malloc_pages+0x3e2/0x990 [ 606.583891][T24076] snd_pcm_hw_params+0x1408/0x1990 [ 606.589033][T24076] ? snd_pcm_playback_open+0x130/0x130 [ 606.594521][T24076] ? snd_pcm_hw_param_near.constprop.0+0x6ca/0x8f0 [ 606.601117][T24076] ? snd_pcm_oss_disconnect_minor+0x370/0x370 [ 606.607207][T24076] snd_pcm_kernel_ioctl+0x164/0x310 [ 606.612419][T24076] snd_pcm_oss_change_params_locked+0x1936/0x3a60 [ 606.618867][T24076] ? snd_pcm_plugin_append+0x190/0x190 [ 606.624339][T24076] ? debug_object_active_state+0x260/0x350 [ 606.630160][T24076] ? mutex_lock_io_nested+0x1150/0x1150 [ 606.635729][T24076] ? lockdep_hardirqs_on+0x79/0x100 [ 606.640944][T24076] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 606.647192][T24076] ? __fsnotify_parent+0x498/0xa60 [ 606.652390][T24076] snd_pcm_oss_make_ready+0xe7/0x1b0 [ 606.657684][T24076] snd_pcm_oss_sync+0x1de/0x800 [ 606.662545][T24076] snd_pcm_oss_release+0x276/0x300 [ 606.667665][T24076] __fput+0x286/0x9f0 [ 606.671649][T24076] ? snd_pcm_oss_sync+0x800/0x800 [ 606.676695][T24076] task_work_run+0xdd/0x1a0 [ 606.681268][T24076] exit_to_user_mode_prepare+0x27e/0x290 [ 606.686936][T24076] syscall_exit_to_user_mode+0x19/0x60 [ 606.692406][T24076] do_syscall_64+0x42/0xb0 [ 606.696884][T24076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 606.702791][T24076] RIP: 0033:0x7f47bb0a7ae9 [ 606.707207][T24076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 606.726820][T24076] RSP: 002b:00007f47ba01d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 606.735252][T24076] RAX: 0000000000000000 RBX: 00007f47bb1baf60 RCX: 00007f47bb0a7ae9 [ 606.743232][T24076] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000004 [ 606.751200][T24076] RBP: 00007f47bb101ff7 R08: 0000000000000000 R09: 0000000000000000 [ 606.759171][T24076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.767140][T24076] R13: 00007ffc9e9c4b0f R14: 00007f47ba01d300 R15: 0000000000022000 [ 606.775130][T24076] [ 606.781234][ T22] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 606.796910][T24061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 606.864410][ T22] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 606.869852][T24076] Mem-Info: [ 606.880106][T24076] active_anon:1619 inactive_anon:182649 isolated_anon:0 [ 606.880106][T24076] active_file:5833 inactive_file:101677 isolated_file:0 [ 606.880106][T24076] unevictable:768 dirty:72 writeback:0 [ 606.880106][T24076] slab_reclaimable:20426 slab_unreclaimable:98433 [ 606.880106][T24076] mapped:24382 shmem:11246 pagetables:1688 bounce:0 [ 606.880106][T24076] kernel_misc_reclaimable:0 [ 606.880106][T24076] free:1198425 free_pcp:7037 free_cma:0 [ 606.901640][ T22] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 606.935922][T24076] Node 0 active_anon:6464kB inactive_anon:729688kB active_file:23216kB inactive_file:406708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97528kB dirty:280kB writeback:0kB shmem:42528kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 296960kB writeback_tmp:0kB kernel_stack:10628kB pagetables:6748kB all_unreclaimable? no [ 606.968745][T24076] Node 1 active_anon:12kB inactive_anon:908kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2456kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 607.000376][T24076] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.031579][T24076] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 607.032029][T24065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:29:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r2 = socket(0x3, 0x80000, 0xfff7fffe) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff6c0000000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c00000024000b0ee5ffffff0000f8ff00000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000010a0001006e6574656d0000002c0002000000000009ebff00001a000000000000fdff00ff68e30000040005800c000400ebffff"], 0x5c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x14) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) sendto$inet6(r0, &(0x7f0000000300)="0503d032b2f93e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b0a876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0xc8) [ 607.088218][T24076] Node 0 DMA32 free:825384kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:6464kB inactive_anon:729680kB active_file:23216kB inactive_file:406720kB unevictable:1536kB writepending:316kB present:3129332kB managed:2716688kB mlocked:0kB bounce:0kB free_pcp:28176kB local_pcp:17132kB free_cma:0kB 07:29:18 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5865, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000104ff0000001f00070000000178", @ANYRES32, @ANYBLOB="030000000000000014003b12800b000100626174616476"], 0x40}}, 0x0) fcntl$getown(r0, 0x9) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000075, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) syz_open_pts(0xffffffffffffffff, 0x10200) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x87, 0x6, 0x1, 0x0, 0x0, 0x800000000000009, 0x44210, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7cc7, 0x1, @perf_bp={&(0x7f0000000040), 0xd}, 0xa004, 0xf2, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x1e, 0x0, 0x48a}, 0xffffffffffffffff, 0x8, r3, 0x1) [ 607.224561][ T22] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.226619][T24076] lowmem_reserve[]: [ 607.256811][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.259361][T24100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 607.275250][ T22] usb 6-1: Product: syz [ 607.291683][T24076] 0 0 0 0 0 [ 607.295212][ T22] usb 6-1: Manufacturer: syz 07:29:18 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) syz_open_dev$dri(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{}, {0xb1}, {0x6}]}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000440)=ANY=[@ANYBLOB="012dd9ea5800000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005f80)=[{{&(0x7f0000000080)=@generic={0x0, "8446e86c59a241f3ad997e3ad14e908a27656d70989388ec034c6ae71f3e116b6236d46390b498f9b318c14ec6f09b3de881c2295bc3ea8f2b8ab61cb7b785d6fd2be1c4b0d6121e5e8be0268f981693d9150e27153a81ae10c7a5194bc70d3fb9b93deb8d97bfb9e00509f25597108a3e18ca418970d76835ea8490b058"}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="332227c05350ca1c3200e808fc67f44e2b21ef8457bd38f99b83cbddc4854a87e0562e7df4047d2dd6af03bb78f691c1c00fe14d1803a1371026d37ea9d793da879fded658915f8da0385593e841ec1ec39b7769d554f220d50e257bc61636f945514ae3ab0b73688821f42bae8c0954f9d8a3fb865e822ab33464d92d1078b340049350254a3627f3fb6d7f80019bd439a61448bc08c6685b04961daa9f9c36d9c597671c5d672d2493f248706e5947a28b74813b15c0100b518f568573ba67dd2656b121f12225e2bb7da1cbfca5fa", 0xd0}, {&(0x7f0000000340)="0e987a0f6780bea96630c9bbb10f4543841c1b7f27d40bda87d041ffd0f8b60e9dd23398aa50ee218f447bc506f48b82faa57ae7744a13408730ede2732d00a7d1bb677cd1326dcf30942fdaf8279d08ebf6648d3d44f9746a07846473e15d5223e7e4fa3d9a553de830428abe5bb5871260a6ab21635254db9d4ee02b51bc741b03299ea5606b", 0x87}, {&(0x7f0000006000)="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", 0xf6e}], 0x3, &(0x7f0000001480)=[{0xf8, 0x114, 0x0, "f7d6d438e6bfd0a69b93cdb89f97c25183bf2fbb4918cdf2eb3ce2dc08d350c1d18cb5d9374265dc0692ab8c712179f87657a081a20f750827aa1ce6642d68fc17f1c100b51331c98071378b6359a95c5a9f65357b43bc75a39ceafb135fe4c54eaf38212e0598cc975ad664175ed66fb3ee89f51f780bcf3d94f102ca6861d0f30081ca545345e8da2936ebbf5f1f5323dddede75d6da7f9718de19c8df1ab97233309fc70b26d6c4bde1eedfb5caf5274bdb530ac76066b6ebdcc83ef5110bf45db6f8bfc1ff0dfb7131ea01ad53ff25679758e85a9d686ced10c4cf8994151f274f"}, {0x30, 0x0, 0xffffffff, "826dd721e391c696aea2f72e98ff457e3091ffd2f9ca0030e543e506f2"}, {0x48, 0x116, 0x81, "4223df572a0a29fcc4faf024862a04652f94b2b6b0d7e378c9a881662d5422d6bedf087bfd5507140cb32a5b3155d24c3775a3ca210c8b39"}, {0xc8, 0x0, 0x0, "cfd668df4c1e4289d0b5ee62d9a266cdc0beeeae4d1e2a98eb10d2e79381bca5b0688effd554b8eec105b9e0a0d9ce33140dfb2cf6dc68e5a9662d397a3ec3de15b152c0d26fe683f174e50a4b826009ec610d0f0b351ef9a8c377862eb3dcbbdf3e9733f68cf10cfdba0dbd751e4f70cb9ee728aad1b61bf1ffdfd16a93878d7480f8ba0c1e8201713d4f79856a4685e37055ea1e2385a1defb3007a81d63f0c3d1535d1ec766c2dcb8ffd9a938a6b523573165eb"}], 0x238}}, {{&(0x7f00000027c0)=@l2tp6={0xa, 0x0, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6, 0x2}, 0x80, &(0x7f0000005b80)=[{&(0x7f0000002840)='S', 0x1}, {&(0x7f0000002900)="3efe29d5f482196643af5adcdecef091f75adcd63f0d566f6de8777a5ceb46e780f3e5a03311c23c8c44c0f34f3b326705944058c7ce4e4ad760bed9bfa2c0b490947fb824153860bdd48340ae09c1da09d6a0723e9bcbe8a9a899751cce51a2256bfeb117753226de2669bb7cb96d802d0a1b770b18a6e86a", 0x79}, {&(0x7f0000000400)="0a1b78dfcbb0e79199cd3478dca009089cee4741e989224caf8b0d974a44cd0cb7ea49f4d0d3", 0x26}, {&(0x7f0000002980)="bb5fbf0d44d2e7d65303c2050521a11672abdc4ce5d5e3bcd50d78ce58506a1e3e5b291b60bfce23797624457cc6c13a114d0aa739f0813de6e6d463ec5a6470ddbd1c16c409dd313f3e52fda86d84a82d071dc3798ce5b7b97a5b5f9cbd86f2d989364da8a977796799d297cab90381cac361bf657602a55e3648fab77c7df3ad985593095e0622987deef101d4c03a4de55b39ec74c20a5fa8379aec32000a8f8fda94c09461ff133fb189b95978e1a2c3b07bff29835c0ab8c47f3b3e94c7bdfbbead4cd32d141c150738037a3b4530223f95268006b3531ec13bfe1acfe1e242b1b16043a85da34b9c11e02715cdd9ad3dd3dc24f9fe0c241415cd63de58cf8beedca613b76cd64ff87623085f46b807fd5c50c99c50f7cb532db581a5f502c9bc2dc593bc50bd61b489ef7fce86c91e5810e469701422e6cf8548eb14410d2de06dc5295b25db5fed49c2df9dfb87699bc2a8788522143cc87648b7cb23d04f92c1506316babae4088abd2fc20c8c29902b39c3111de8dd3f3079b9ac0e02a04763dec9ba82ac0165b4b0db3b1077d74c8c8aa81c88cee5bdcd76d4ad0f694e592f3d03546e32aa37f9f5e72f215b32d156d3bebd36f4955818cd68b354bf70b441735906599c180e33ed24b50e23a841a52d40b8cd482ed844c5473a2e946c55a69bbbc05f7a226c0b135ed8a8a085026542f5c36081b983fcceb5aa567ce36e17ddb3c46b3da8effcbe76fd54759edc9102121168844b811f544a721bc371757d895ae4145b0f713b98ac7a5adaedf3c6483d738800a4f24e5624f7aa27d327f5fe2cab599e44327f1055825e85db3997570f1d2cf90e8caa70fab6585b4776e095904fd925d741cd97eacd3dcead9c78973320ecc732b360da284d0068b545f0ea07e68b940d23bcf73bf4bd5b0c4881546006a0698065520e154c18ce94ee109568d95bc721e2663bfa7cdb168711d3bb22bb0ee98e0ad4b67bd908aa927f7a004b3724d0c62c23d1d0ea7e18212f19b875ff6490e512c6af6a1762a7793c4a033462514a361fd91885828713f0a5411b5ec61f08b2bd593e136967387b19c2f9a3f5d69f32433c5546974d1a2c5f6d416010ce2301272b3b533dba4f334b28642f272d7e8c83859a9090a33d02079cfd900e38321c4b6f55678e5d9c8b9f540af09a16d39cb6d3766cf2d15865a60319f72ab87db259ffe2efae52ea73b8e0aa0f7cf37bf284b0b2cf406e6058a3c7a932e046a47804f74f3cdfd0078ada610c5383dd4d7cbca2e0a8ae171ec1c5295a5a1c087163936ba70c7c02ea3b7a0eaab086e20056ca2831ab10d4816a5696891b8aee988f972b1d061d4d2ba8486236d2dd75f3f218c803798866323abeb93d1168200110f7a6dc7edfec1f60850ee272f8ab66f599c3a1ea7b8e3af305c7f21fbd3137080495adc594ecd66d1fe34570cdf8ca3facb2416d34c59a09d2ec81b6dae96cf84a10a5099b56bdce6dd2c747baace73135154ff061616290d979681dfc6f5b56d048cdd4bf241092a9a257beef895b9f285ece2e102fe29ff1e14acd501cd05699858921c36eb4c77c83b7dd6268606dae1876df4323f0c604baf3bc77003efd12d9fb25eb03e0d5d52d218e463c5616b49ca3ca96b9bdfa51229f7fdb848240cb12c6d853d6ea45b6c45505b3ba4da3e2a4c12a6b01dd24d3d21dc8dc7ff08d003b22e8046b1bf74aec27d8f4b0c5d95d2e15eb43ecfac721e09556bea5a8a653f3f05179f01c782ba8c0249cfd2d24cdefe1d13b3bf967e1da6fe913612ccb48a8d8ed034a2328049b2fcc7b8452196e40902aa1aa73e840db05017fb686d414632e1b76de581a84d337b8daaab0991b1ce18f87b478ede72648c6ab4b91f9f7e480665309da9fdbdcadca6f47a67b30e9cd505cd314b6d4c5011ddef73b18f96672379548aafc62ea8440a4f04e1393efcc206edd9a1334bee4c7ac86698898ea6bb39993573bee69e91be9f68cc282ac6a8bc82906e871d3bd30c67958a2860a04312733455d4f5c133a95ae213913417fb8a9ac3b9049d0bb80be316ca6a3c5946f7c557595057de199bc5872753db30b635764c3bfbff41e071f9929cad1ac6af5bb4b76d5292d3319340b216448349c9e6998b2e2a18603dc2d0d60c19074fb5ed3267774758c8bf6cc13b8f7f47954e9c184b579bf8eb6babb1413e9458c46ad77cc53bc4a77ade37672a99f9c18dcb681a91916d3c2e4a0d8dcbba83ff89ac07ca614fefcca98407212412bbc99cffcf58efcdf66cefc6bfca650ab11deaf613d324034991a36ce16a837e8cb3ad4a6fc2f527de9e3a15e2910e8992338f968772bab08e6fc069e7493b89f9ee8dbcd15fc2430b55787e68a454c5d0a508029afd8bcb08ac992adb9211881005438146009d2363e9a2964566505babe9d6242275e73b81401ae1ee81f9e1bbf19a4d7926d1b7a4ff9395999fb56844f38d8f667373a99ede082644376b0de66747601af7946c8f7c9ac0f9db74bec770f0cf07554dd68a6f78cb7967ab14365519f665fb04b4a4693556776bca0b93316625855dd7cff66e666ab6b81ed70175a778a997294749cdfce6b881f18fc928c6956a79d2145be94e6819d0601889721cad6fb750ef6d86cb4aca29fdd89d39586d24618b7017b969b78ef4ec0beeba108500cb11a810f9f1bb5859d7d4b4bf9554b85544ad650219c7c09daa904b604c8801cef19932e2ec3b2e9058db0831e4e2ed6ef9cff0d6321f72d31c17d46d8a0ddfcc48e90768ce770a4f53a12e8728cce5d0b063421c3dace54a57999aa8abdd01fc172a876f8c85aa452a837052acd3e6beaa80ae43914234f26bdd830b9c3a11f6d1fac6daa1149dd9c1837e86ba69d34f4d795240b0342bdbef05f2ef6c8b69cb0e5273962784ae803215508f9c11cbcd54650c8282c11c0e832de6c3e7ab9bd199d3bf484ee8645944bbf1d825033d51047bea2d0f90376a98461302e2bd3ee5980c3cbc270138ffec792fd927f9dfd73ea8382636280bf5a97d203277f4857fb92768f3151568c0337054a324f801c606d64f8bc8292272e3c1a6328b0d7f49f6a1d9935c17458c482e9fd51c5442731ee155dc76f35c42a304a49531a44bdd2cf02ce0ace1d9d7ddcd25bf53add0f3df828abac5afd19dcdd054cbd1988feaf89ef17c22204df3d3f9cd2a3f334fccac959a47c963cee5df1461fe0f7e23b8f1a5e616c1f9f699c83c829b1e27379db1eaa76ff57ca6bf61d198c217f07a7072b152f4e6f59a8c379affc9039ef150f68f928e7806169871ee06eadd15489d85095490281c60d166c81164534e1f1f8b28a1c76e831fdf673b2349384ffad1bd93f874edf96bac296fc703d1ea027ccc226ba577a078d40422de49cf9df4d48bd3016d8cbd83d6013cbe86580d425d4fbf85df6ddbcd87a744f60c2bce8f3b0d50a44c6280ab1402bcfa7cd7e577515e529b27fb65f7b5a4d190ac727c1ba3527c682127311d5a2b304e0d025605d74d44a996982bd6c5d3cc8746345468e2abe07c7c662df9a962728ffa1089edd4886d910b33e2cde8942f5a19a240f24165ef888672e80427b0d75646e0fcdd2d78f28c183634cd02a19c9a0c98edf37086c94365d70fcbfa508068c18efdd13ad3b4cd90a1cc4ff215c233ab96158b088b7def2f14225b411bf230b3ceb3c3e32e234cf5e26d1eccaef9d3adae6534e11a520342dc0c6ce152d5b1dda31b9f384b1fd4b8a909d54ab21c4f339f4bb510cf4fb8833a2630aaf954b26a5b8b6b49399865843ea8cc16f3e8009621f3dedc30fef7d4b7d2351233991d1b0f692f93a6e77da3dc99fb436a15cfdd3a06cb1f5d8b0ec2292455d42ec4aac89642534a4b9aa2ae492326c6d74b62b5f187d5cf0eb647ceac00fc1a36287fac3e462a7fc8fb7c44a598a0dd7b18b50af79fd3e48661f0ed22897f16172404666df4c41122cbbbff79df3ab73c656c97fb3cca0a1da5d328fa100caadfc74bfdba79e1d30301741905b89d89dab55c3a5a1ed8c9c9c530ffb0efb023ebd2fc62dee5e237ae15c5b882e3082a657de03031e26cc589044a0eefd8f6d7093184e1d4d5f2f6dbb1b208cf82bbcec2fb97c9de2d8c01f9ae14cbae43860ce5b1d552c2809cab9061ce309950bea299004f8f8f9428e0429e388da0af7a22ef055c63d431036a04d2c66657d7a19c4d66d2456afa3aed27af6c5bad484614b3212991c74c839731b9308662a2085a06fd0e6a669b26df1d5d083f5bdcf9380385c1cab343e5157e9485b5aa6988a35f3c249b7acd7137c07d47dec540bca39a65858cf07ee122371189fc431a3f13e7b7d086e289a8268d9aece320973955e77a626efe0104175ec73c7b44d0e5e077670d8052136c8db37f7dea370f61f00c5abf6cc447f351375ad074e28ed8445335fcaeb3d1274817269c38a0971ac8f1bbc4c13d1f1fe5b8152c8043bcdb9873934e2ddfd84689b01f2789088b8d1c5f2bbd26b7af586fc6b73eb687fe359bdf196d7b784d9918298f80e252f491da94c9b40e43537747139f841aeabf6c291cb2b2fac919221dbc1825a262b4b90461ff348550fa32760d0c58056572930820f254b8ed7c5d52d6fa4c7aac935cf1beb96759f5d1e4607772e136d817e3fd20142bf3be9220161476693d87df7bcc3c6c5733f49a51282f4e212478b09416c95a42bf93bb9e3ebd45e3b320a8fe6de8828076d935c3f3b130392606575e10915a3063f6c3c012cda695d88c40eb1c18e7034bc67c9335892fb41372d7dcdd18b165b70c983c79b33847f30e6194ef7857ac5a9377e25a03d3160617db4e472e6e53bffdf7293d8b9b3e16a05057bb6fcf80f8a7b1bb498b24283d41a61557c1ab6617359079123507b6ffa64822117edb8c3c515a75473def3813d55b2ef7488509e5f0b019005b6dae63e3e196655aa1a497c0cc0ffddf6e10e5252e837bf009c912a2ed0c2c2411c80658eb8f78ca065517397a27edb4a52ad5cb6b45e601fe38f6fe1eb2370ea00081d6424ad3027c780034b1fc24e8eaecb105397bb9231eb1b22e3f8788c78b99ce6ccec54737e2fc19fc2742cff7fdcc46552902f56ae6ecf701f014e140c96f95030f8f51966314f3a7dbd94ea7435c304214e44a584d828e0937a453a2c10e89642f7b67329e4e5625edca639b3d249b0d3d757ca748de8ed44b9e7fe4e0b636ad412135c190cd41b1021e77f4c81682f78630cf126d4fe31c044f7ec9091e6f3ca3a611b271182a6f28e1b07d057c997e7e9c75476b7a301d78a29c6dca27e8baf01420b31d5637050095d11577ede210cf7a1a08a8df74701745c01cf6f72970a23ad297bd2080b20b5cc2e352d850048e876e922771dd64d292517d45878dca5d35dabfb60c8c4a6565d5c692cafb41426b6785c567311966dfb84d1e8d5f75be3dedb867a412ac50b584852f910f40ffd6f6499c9bd986497a19ca346878d9b22ab1aec240e2c8e6608c64320037acf6fcaf75b266d385c7e1fdc50080e41fbdd120a6af7177186a5fc391c3e58739f83634c1754de211b42c77b97ef055340bab6dff27bfb7c4a83f5fb01e16cc8dfb61c29001f4b4058114dc1e9a9092c3e2a259b625b9165faf49c89e8d2c81371970bec3183814b29b92a4f8c4f88afb036e14ccf3c61db7ffc2b66f83d04fb3f937428f06cd543e2e3e217c439e8e32788ad9d9999177262b60c0f4453438cf8609fc8e0dd466113b2d81ca9a527ea826a0063a1e53c337da19c04", 0x1000}, {&(0x7f0000003980)="cd8e9548e6fb9abfd4c6375c13364f6bedce7b7c6093a5d37fd2964bf266e03b27e093a3de7817a570fa87cd9a65d35e9ead078910c9ea3d553be373ecef51a33d42f982cbfe7b93f017b1d6f3c64c3e689f7ca0f2bedb29b9581fcdad8a1c1862d9b77044f68519fb6afe3275f3b9252560f4f7e27bd8f4a096484147575b5457e46f10654ec1ec1b7d989801", 0x8d}, {&(0x7f0000003a40)}, {&(0x7f0000004b40)="e29433a2", 0x4}, {0x0}], 0x8}}], 0x2, 0x0) [ 607.306700][T24076] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.338839][ T22] usb 6-1: SerialNumber: syz [ 607.386286][T24100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 607.454333][ T135] Bluetooth: hci1: command 0x040f tx timeout 07:29:19 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05310340000000000109022400010100000009040000010301000009210006000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="008d9d30a4901b76f810a4ac7a6fe87e97c496eed4b64b2456210dac45b78ecc2d9ba63857dc6688c443e29db96b006568f428e7b28f46d2f77aae2dab996cfe1243fb4a662f1c38b3e602a971b85c48645b809fab5bee25759603"], 0x0}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x4, 0xc0, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "3ab99503"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x8000, 0x1ff, 0x8}, {0x6, 0x24, 0x1a, 0xac4, 0x23}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x21, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x40, 0x81, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3, 0x3, 0x9}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x22, 0x80, 0x30, 0x40, 0x8}, 0x76, &(0x7f00000001c0)={0x5, 0xf, 0x76, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x40, 0x9, 0x8, 0x3f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3f, 0x8, 0x6}, @generic={0x4b, 0x10, 0xb, "080838435424943b9a1142aa01d58a7a077e0e12793a8342aafbd31f274cdc8f21f36f9e9c7327386498ef86e29ac4e53d14b935991583c610c79f6afb434803475da858b8475b4e"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0xa}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7f, 0x7, 0x2}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x457}}]}) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0xb, 0x69, {0x69, 0x23, "d8bbd5137c2ed847cddce85849a2c4e66b0b45c252d5482d78a36ad515a00d2b46e6a09164a1e78eb45829cec364cb0840a1fbe51b3475336e3a588b7a11d8d8453787a5d34183b5dc1db7d54b7d7f3a93d56d415ea25983181bbdbeedcfa7c4fc423947d35f17"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f00000003c0)={0x0, 0xf, 0xc4, {0x5, 0xf, 0xc4, 0x4, [@generic={0x9d, 0x10, 0x3, "2803cad9685e5a17b252f9d2fe31f0ebd39af68bb6493eed446ed49cbd03c9754295733628ada544d8849540eba2931bfa8b989cce688b2596a5ed286014e16896f836221ba7b6ca796f67c7a5529d3d8e77786e6401cb134ff05bed6a5357726ea62c46560a4d535d9dcf928cb1b1739705108cfa63b89c381893c60cc422863a0db0449b7af18861aac62f1a2ea3f7ac27b23b9457d7115cbe"}, @ssp_cap={0x14, 0x10, 0xa, 0xd2, 0x2, 0xd24, 0x0, 0x4, [0xff00c0, 0xcf]}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x3, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x9, 0x1}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x86, 0x3, 0x3f, 0x8, "71fe3176", "993e4ff7"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x8, 0x1, 0xff, 0x20, 0x2, 0x100}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000580)={0x20, 0x17, 0xf3, "607faaac1db1df78ed075ee3da70d0de96f16223b3127fa6abcde8d96a626c7966d0acf2e9d6422a2a75a0392df186fc4f4ee6bf3d7525e9e99b36fdfdd0dac6fabb9bbed3c10c3ae4edcca9ae0d8cc2875b3f0875928fc4c11521bbb7a0b9cb98b5895f413cbe82ebbd65098fb9f64df2f4b8ecedc5723b1415ebaba09dc03958f448cf0bf2ee029f99a5cb5181ccba57eb4362f5f4b4c0c23e2237045fc1805896511d8608aacaeef073ef415085b307062edb90bf289b640358dfcbd939f292ec9425338f773dd31d0f1c5d97b9a2e626e03889018e82167183867f03becbe40d0bc4dbf31791da8b8aa4c2d854b1cc7ae0"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x800, 0x1, [0xf0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x200}, &(0x7f00000007c0)={0x40, 0x9, 0x1}, &(0x7f0000000800)={0x40, 0xb, 0x2, 'f '}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000880)={0x40, 0x13, 0x6, @local}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000900)={0x40, 0x19, 0x2, '~['}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x71}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x67}}) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x109540) [ 607.569581][T24103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 607.581108][T24084] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 607.607167][T24076] lowmem_reserve[]: 0 0 0 0 0 07:29:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 607.655402][T24076] Node 1 Normal free:3952732kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:12kB inactive_anon:908kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.697904][T24076] lowmem_reserve[]: 0 0 0 0 0 [ 607.725895][T24076] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 607.880645][T24076] Node 0 DMA32: 410*4kB (UME) 370*8kB (UME) 139*16kB (UME) 715*32kB (UME) 67*64kB (UME) 11*128kB (UME) 3*256kB (ME) 1*512kB (M) 2*1024kB (UM) 4*2048kB (UME) 188*4096kB (UM) = 816968kB [ 607.944553][ T7885] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 608.080253][T24125] ubi0: attaching mtd0 [ 608.088574][T24076] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 608.145464][T24125] ubi0: scanning is finished [ 608.151335][T24076] Node 1 Normal: 171*4kB (UME) 36*8kB (UME) 31*16kB (UME) 141*32kB (UME) 74*64kB (UE) 19*128kB (UME) 9*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (ME) 959*4096kB (UM) = 3952732kB [ 608.249091][T24076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 608.291036][T24076] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 608.314668][ T7885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.345487][ T7885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.364336][T24076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 608.405764][T24076] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 608.418574][ T7885] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 [ 608.427991][ T22] cdc_ncm 6-1:1.0: bind() failure [ 608.452528][ T7885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.469704][T24076] 27337 total pagecache pages [ 608.492598][T24125] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 608.500888][ T22] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 608.501754][T24076] 0 pages in swap cache [ 608.517682][T24125] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 608.546856][T24076] Swap cache stats: add 0, delete 0, find 0/0 [ 608.560285][T24125] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 608.587686][T24076] Free swap = 0kB [ 608.594041][T24076] Total swap = 0kB [ 608.600309][T24125] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 608.619201][T24076] 2097051 pages RAM [ 608.623358][T24076] 0 pages HighMem/MovableOnly [ 608.628216][ T22] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 608.643507][T24125] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 608.673613][T24125] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 608.681791][ T22] usbtest: probe of 6-1:1.1 failed with error -71 [ 608.684767][ T22] usb 6-1: USB disconnect, device number 15 [ 608.715144][T24076] 384534 pages reserved [ 608.719418][T24076] 0 pages cma reserved [ 608.750540][T24125] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 608.798230][T24125] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 608.883592][T24126] ubi0: detaching mtd0 [ 608.883631][T24132] ubi0: background thread "ubi_bgt0d" started, PID 24132 [ 608.980501][T24126] ubi0: mtd0 is detached [ 608.986391][T24127] ubi0: attaching mtd0 [ 608.992405][T24127] ubi0: scanning is finished [ 609.001153][T24120] UDC core: couldn't find an available UDC or it's busy: -16 [ 609.021545][T24120] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 609.035797][ T26] audit: type=1800 audit(1638689360.552:46): pid=24042 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="file0" dev="sda1" ino=14289 res=0 errno=0 [ 609.134893][ T7885] usbhid 4-1:1.0: can't add hid device: -71 [ 609.141233][ T7885] usbhid: probe of 4-1:1.0 failed with error -71 [ 609.282702][ T7885] usb 4-1: USB disconnect, device number 17 07:29:20 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={0x0}}, 0x4040090) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000840)=[@textreal={0x8, &(0x7f0000000180)="0f20d86635200000000f22d8ba4300b80080ef0f40493436670f0147000fc7598066b90609000066b86973b23366ba018e785e0f300fc79f008867f30f09650f01cf660f6d802fb1", 0x48}], 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f00000005c0)={0x200800, &(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480), {0x26}, &(0x7f00000004c0)=""/99, 0x63, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3f, 0x5, 0x1, 0xa, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x9, 0x5}, 0x8400, 0x1, 0xe5cb, 0x0, 0x8, 0x1, 0x9, 0x0, 0x6}, 0x0, 0x10, r3, 0xa) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x6000) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x10200, 0x2, 0x4000, 0x2000, &(0x7f0000fea000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x20, &(0x7f0000004e00), 0x0) 07:29:20 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x100d0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x4e141, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0x401ffc012) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xc040, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x69}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "531df1bdaece88f9f6d4fe0d8c9d60b2b44c0789cb26babe"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4ed2c1febd5b0ff33d203e0c575ede32eddb2b9ce9c7bd15"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x44001) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)) 07:29:20 executing program 4: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa000000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000000, &(0x7f0000003900)={0x77359400}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x69a6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x29, 0x9, 0x5, 0x3, 0x8, @empty, @private2, 0x1, 0x8, 0x5, 0x8000000}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, r0}, 0xc) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000014a76000000000000160000000a20000000000a01010000000000000000020002000900010073797a300000000038000000030a01020000000000000000020000000900010073797a30000000000900030073797a3200000000800000007f0000000000000014000000020a0900000000000a000000020000061400850011000178829f66062c4f7a36fb27956c2b719b50bd"], 0x94}}, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x15, &(0x7f00000000c0)={0x0, 0x60000000}) clone(0x0, &(0x7f00000003c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7, 0xff, 0x5a, 0x7f, 0x0, 0x28000, 0x80000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x5, 0xf38}, 0x610, 0x5, 0xdd88, 0x3, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x188}}, 0x885) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'sit0\x00', r4, 0x2f, 0x3f, 0xfd, 0x1ff, 0x8, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x7, 0x3}}) [ 609.393940][T24127] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:29:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card3/oss_mixer\x00', 0x393881, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 609.536549][T11212] Bluetooth: hci1: command 0x0419 tx timeout [ 609.571225][T24161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 609.653203][T24168] ubi0: attaching mtd0 [ 609.673464][T24168] ubi0: scanning is finished 07:29:21 executing program 2: socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x3, @private1, 0x1}}, 0x2, 0x7, 0x0, 0x0, 0x2, 0x20}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000380)='./bus\x00') r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000200)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x200}, 0x0, 0x0, 0x7, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x0, 0x800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe", 0x6}], 0x1, 0x0) fallocate(r0, 0x3, 0x4, 0x208200) 07:29:21 executing program 4: sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xd, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 609.756149][T24164] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 609.835158][T24168] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 609.847328][T24168] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 609.874295][ T7885] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 609.876532][T24168] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 609.930869][T24168] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 609.958784][T24168] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 609.971520][T24168] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:29:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x4, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getpid() mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x70024000, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x2) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x7a04, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x7, 0x40, 0x0, 0x3f, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xfffffffffffffffb, 0xffffffffffffffff}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) [ 609.997713][T24168] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 610.015961][T24168] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 610.028890][T24181] ubi0: background thread "ubi_bgt0d" started, PID 24181 [ 610.037795][T24173] ubi0: detaching mtd0 [ 610.049933][T24173] ubi0: mtd0 is detached 07:29:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) sched_setattr(r0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x4d5) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x3) [ 610.073761][T24168] ubi0: attaching mtd0 [ 610.082190][T24168] ubi0: scanning is finished [ 610.213160][T24168] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 610.247445][ T7885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.779714][ T7885] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 07:29:22 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "001a1a", 0x44, 0x2b, 0x0, @dev, @mcast1={0xff, 0x2}}}}}, 0x0) getpgid(0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0xfa, 0xa, 0x2a, 0x40, 0x0, 0xdd1, 0x100, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7fff, 0x7}, 0x8018, 0x0, 0x8000, 0x0, 0x4f, 0x400, 0x1, 0x0, 0x3, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x120}, 0x20) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0xc, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) [ 611.020919][ T7885] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.40 07:29:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000000)=0x465) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x3f) setreuid(0xee00, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) r3 = openat(r2, &(0x7f000000c380)='./file0\x00', 0x84842, 0x0) gettid() write(r3, &(0x7f0000004200)='t', 0xfff4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', 0x0, 0x179c71ec, 0x8, &(0x7f0000001840)=[{&(0x7f0000000140), 0x0, 0x7fffffff}, {0x0}, {&(0x7f0000000300)="ba85b9d8d5030e1afcf228036310747e8a1b03f13805e5f5ea51cef3083b347747c077b6218e30b657ec5dc885526be3396b1698f9366ad250886dbaf103ae0d50a176a262c1ce2cc21ab632a2302d74a405ed20418c9350bc668b13d7e7d2fe51edcbb54b4aa8b3e33a5e0e724b859464c18e38b72adda4", 0x78, 0x399b66a7}, {&(0x7f00000001c0)="8327c600f6fbefa8fae1f5d9e8e46f1d3a0c447acdb6f772529a48a455bb6bc38b9cd34cc21d3d9ae9ae7b50c4ab21", 0x2f, 0x5}, {&(0x7f00000003c0)="ff80695ee85a8c29897b5cbc4b46389e2d2d47815aab7b4f5e73dfc6485e26b74678655c", 0x24}, {&(0x7f0000001540)}, {0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x2}], 0x110808, &(0x7f0000001940)={[{@nojournal_checksum}], [{@smackfsfloor={'smackfsfloor', 0x3d, '#'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_type={'subj_type', 0x3d, '*:+\\'}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, ':^$-@\xe3'}}]}) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:29:23 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x640502, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000400)={r2, 0x3ff, 0x2, r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r4 = accept$unix(r1, &(0x7f0000000280)=@abs, &(0x7f0000000040)=0x6e) accept4(r4, &(0x7f0000000380)=@un=@abs, &(0x7f0000000140)=0x80, 0x800) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 611.464939][ T7885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.498359][ T7885] usb 4-1: can't set config #1, error -71 [ 611.515464][ T7885] usb 4-1: USB disconnect, device number 18 07:29:23 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)={0x14, 0x27, 0x0, 0x0, 0x0, "", [@nested={0x4, 0x2}]}, 0x14}], 0x1}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) semctl$IPC_RMID(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0xff, 0x0, 0x9, 0x1ff, 0x0, 0xef88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r3, 0x0, 0x2ffff, 0x0) [ 611.651373][T24251] ubi0: attaching mtd0 [ 611.658626][T24251] ubi0: scanning is finished [ 611.791024][T24251] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 611.821065][T24251] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 611.837712][T24251] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 611.888194][T24251] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 611.911106][T24251] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 611.920363][T24251] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 611.929997][T24251] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 611.939757][T24158] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 611.960987][T24158] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 611.961823][T24251] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 612.005796][T24260] ubi0: background thread "ubi_bgt0d" started, PID 24260 [ 612.013643][T24253] ubi0: detaching mtd0 [ 612.027607][T24253] ubi0: mtd0 is detached [ 612.056897][T24251] ubi0: attaching mtd0 [ 612.062072][T24251] ubi0: scanning is finished [ 612.186540][T24251] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:29:25 executing program 5: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020f003176c4000000000010902240001000000000904000012070102000905010200000000000905820200000000000c61195aec800cda8123d6448f671bf4988c7146aa4730345eb8cc2c83358f38a898dfe1a274a583f2d0bbebae1f7580", @ANYRESOCT], 0x0) 07:29:25 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x30407c42}, 0xc, &(0x7f00000001c0)={0x0, 0x120}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x7, 0x8, 0x5, 0x2, 0x0, 0x5e67, 0x2550, 0xd, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_bp, 0x9080, 0xfffffffffffff756, 0xffffffe9, 0x0, 0x6, 0x8000, 0x7e, 0x0, 0xff, 0x0, 0x4}, 0xffffffffffffffff, 0x8, r2, 0xb) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)="8096cd466bbcca32e63f105a42b2b65a6dbb5eed5dbe58dea843359c6a77a887320409e65b3d56e43145ad2f9dd1ae9c80d4109017e1ec3041e7f2072787b7d6b91a3c70d68eddff36493ff06ced53e1abb4d26a78723731e634a14893b2f2e8a4be9771aaef7ab326e98235080a6cf50f3d631a2e4f556cd8e07b437b2924b1f22c79ac49f1632f5b78cece9286247278e35ab2e708174d9873295011ae369c45726f268d5a417b6570f0ce824d5445d6d39a0531dc8767e090d7419c391eabb723f4ed7cdd6accdf", 0xc9}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) 07:29:25 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@newtfilter={0xe4, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xb4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xb0, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x50}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4000}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x20}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x55e7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xd8}]}]}]}}]}, 0xe4}}, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) stat(&(0x7f0000005480)='./file3\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {}, [{0x2, 0x3}], {}, [{}, {0x8, 0x3, r3}]}, 0x3c, 0x0) stat(&(0x7f0000000600)='./file1\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x3, r3}, {0x8, 0x5, 0xee01}, {0x8, 0x2}, {0x8, 0x0, 0xee01}, {0x8, 0x4, r4}, {0x8, 0x2}], {0x10, 0x4}}, 0x64, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={r0, r2, r3}, 0xc) getpid() perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) r8 = dup(r6) sendmsg$nl_route(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x0) 07:29:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=@setneightbl={0xc8, 0x43, 0x400, 0x10001, 0x25dfdbff, {0x2}, [@NDTA_THRESH1={0x8, 0x2, 0x5714}, @NDTA_THRESH2={0x8, 0x3, 0x1}, @NDTA_PARMS={0x40, 0x6, 0x0, 0x1, [@NDTPA_PROXY_QLEN={0x8, 0xe, 0x4ecc}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x7fffffff}, @NDTPA_GC_STALETIME={0xc, 0x6, 0x3}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x6}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x5}, @NDTPA_LOCKTIME={0xc, 0xf, 0x100000000}]}, @NDTA_NAME={0x7, 0x1, '.\'\x00'}, @NDTA_THRESH1={0x8, 0x2, 0x80000001}, @NDTA_THRESH2={0x8, 0x3, 0x3f}, @NDTA_PARMS={0x40, 0x6, 0x0, 0x1, [@NDTPA_UCAST_PROBES={0x8, 0xa, 0xff}, @NDTPA_ANYCAST_DELAY={0xc, 0xc, 0x8}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x1}, @NDTPA_IFINDEX={0x8, 0x1, r2}, @NDTPA_DELAY_PROBE_TIME={0xc, 0x7, 0x6}, @NDTPA_APP_PROBES={0x8, 0x9, 0x9}]}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x200}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x64000) accept4(r1, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f00000000c0)=0x80, 0x80000) r3 = accept$alg(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000003e80)=""/4096, 0xfeb8}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0xfec8) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x401, 0x8}, 0xc00, 0x4, 0x2, 0x0, 0x100000000, 0x20, 0x3, 0x0, 0x96, 0x0, 0x3}, 0xffffffffffffffff, 0xc, r0, 0x2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="01b8fd57d4b0ccdaaafdbd64b878e835522ee3a344e8e15a6d06d71215755c0f1542f4d820a8dcedd32334a1f2984bda83ebbde67723f122feb6f3c979c3683cd7a884c5032265a8dd2b20aa91c66906671e7f53d234e7a6f612fed9b32b85abaa3dc3eae0261b686cc189a9af23da2497f3e9fa4c8ef447bb87955a439e081f7af516f3081e7f5e857d161d144d5aa723236ee8419e024e64", 0x99) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) accept4$alg(r1, 0x0, 0x0, 0x800) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4(r4, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f00000002c0)=0x80, 0x0) 07:29:25 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:29:25 executing program 1: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) semctl$GETVAL(0x0, 0x1, 0xc, &(0x7f0000000540)=""/4096) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3, 0x2000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}}, 0x0) [ 613.920156][T24287] ubi0: attaching mtd0 [ 613.947012][T24287] ubi0: scanning is finished 07:29:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) openat$vcsa(0xffffffffffffff9c, 0x0, 0x34280, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000000000000000008000000", @ANYRES32=r3, @ANYBLOB="0000ed5000000000280012000c006859c7b62859281e4b94ed4c82df3c72d888001d4163e36623fd1d4f8b507767aedfcb67f025ab"], 0x48}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$qrtrtun(r4, &(0x7f0000000340)="9bab4946e2c609cd4e17976930fe5d1525afd178e6dec8c6a314565df27a75bf93e437c4b51a5db287419ca1a10e58fa69febafb6d8635613273a70f4a1af0460ffb43734d9494a7a54a2467b42b25d08ac539ab0857217179eac6b1969d9c3e323f987a5683973ea4ca6a4f0c32c483b197ecff74579b6047836abf606a3203fb16e8e847753360dab01e4812bda3501d1760142109c7fac894d32b5b986ed5c52c5ae053152ece837bf952e008d25be415f54b97db287477cb485fd8a1d269686daa1d69c74897dc52a4874d90bec03c90ab2ce1", 0xd5) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) 07:29:25 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x56, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(r0, &(0x7f00000000c0)='.\x00', 0x0, 0x4e) accept(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r3 = open$dir(&(0x7f0000000140)='./bus\x00', 0x40043, 0x70) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000300)="8a50500a5c1f94ed40611b2bbb38d402115159097007fc51732d673eb1f41ddfd808eb3ce02231068f4f18d4f4a79d8bc683a9563d70116b912130e5a4b9314c190675bdfd41df196d06641ca1173704d1146c54a510d03a78a198d993bfa28746726f62a6a8d25b7e3dea7ddeef574b90f49d546e8d9a0e2cc657440a3b9691dd54a58ed49402bc00eaa0ec140c021695b1f8aa22e87ffd84cc3f3eb17ae19d43283708078d9b6e77aafbc7b9e6aabceadb1e511f43675388c2233babb2b5db1ab9", 0xc2}, {&(0x7f0000000180)="0b6a3f74789be3c8da99b20a72754f23924fdcaceb98658fb074b5998f37aca0e16786ecd3ffbd2c03cad3491f228cbfd9bc3451d8f77f6dbf013c440318516e96fa0e4c9b8d34e31bb50f7dc84b46bfb12210905cfa91e985474561abe2aa", 0x5f}], 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x80000001) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x50, r1, 0x7d63000) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./bus\x00', 0xa05, 0x0) 07:29:25 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xafc093b5c9f3f3db, 0x24, 0x7, 0x4}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @selector_unit={0x9, 0x24, 0x5, 0x3, 0x4, "c610d29b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xfd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)) dup(0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, 0x0, 0x440802, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0xa, &(0x7f0000000200)=[{&(0x7f0000000040)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000e1f4655fe1f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000008000000018000000c20500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e3837363538343334", 0xa1, 0x400}, {&(0x7f0000010100)="000000000000000000000000a4d0099b099d46eeb5a6d2ef5e9d5ded01004000", 0x20, 0x4e0}, {&(0x7f0000010200)="0100000000000500400000", 0xb, 0x560}, {&(0x7f0000010300)="020000000300000004000000", 0xc, 0x800}, {&(0x7f0000011500)="ed41000000080000e0f4655fe1f4655fe1f4655f00000000000004004000", 0x1e, 0x2080}, {0x0}, {&(0x7f0000012400)="504d4d00504d4dffe1", 0x9, 0x20000}, {&(0x7f0000012c00)}, {0x0}, {0x0, 0x0, 0x50000}], 0x0, &(0x7f0000012f00)) [ 614.138579][T24304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 614.191639][T24287] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 614.235347][T24287] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 614.298442][T24287] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 614.334507][ T7877] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 614.358338][T24287] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 614.418002][ T26] audit: type=1800 audit(1638689365.953:47): pid=24315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=14450 res=0 errno=0 [ 614.564659][T24287] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 614.653895][ T7877] usb 6-1: Using ep0 maxpacket: 32 [ 614.666853][T24287] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 614.684695][ T26] audit: type=1804 audit(1638689366.013:48): pid=24316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir794123687/syzkaller.dmuoQD/100/bus" dev="sda1" ino=14450 res=1 errno=0 [ 614.764932][T24287] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 614.774361][ T7877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 07:29:26 executing program 1: get_mempolicy(0x0, &(0x7f00000001c0), 0x64, &(0x7f0000fec000/0x4000)=nil, 0x4) madvise(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x9) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000fee000/0x3000)=nil, 0x3000}) 07:29:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000040000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007c4a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)={0x48, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c3b40000", @ANYRES16, @ANYRESDEC=r6], 0x8c}}, 0x20004840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@gettaction={0x14, 0x32, 0x200, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x0) r8 = socket(0x1000000000, 0xa, 0x0) sendmmsg$alg(r8, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 614.823351][T24287] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 614.856867][ T7877] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 614.888950][ T7877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 614.890776][T24306] ubi0: background thread "ubi_bgt0d" started, PID 24306 [ 614.907271][T24293] ubi0: detaching mtd0 [ 614.914648][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 614.930901][ T7877] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 614.954193][T24293] ubi0: mtd0 is detached [ 614.958569][T24300] ubi0: attaching mtd0 [ 614.960795][ T7877] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 614.964335][T24300] ubi0: scanning is finished [ 614.979194][ T7877] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 07:29:26 executing program 1: r0 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@private=0xa010100, @in=@empty, 0x4e22, 0x8, 0x4e22, 0x6, 0xa, 0x10, 0x20, 0xfb, 0x0, r0}, {0x9, 0x100, 0x100, 0xfff, 0x8000, 0xfffffffffffffff9, 0x100000000}, {0x80, 0x30b, 0x2, 0x3}, 0x1, 0x6e6bb4, 0x1, 0x0, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d3, 0xff}, 0xa, @in=@broadcast, 0x3505, 0x2, 0x1, 0x7f, 0x11e, 0x100, 0x241f}}, 0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x406, r1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000006400270d000000000000000000000000dfb0be53ae874b3c59fbd98e2fe9a2677ba10caa29047a396f9655451f", @ANYRES32=r8, @ANYBLOB="0000000000000000000000000b000100666c6f776572000014000200100054800c0003800800010000000000"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x90) read$hiddev(r4, &(0x7f0000000140)=""/231, 0xe7) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x288, 0x20a, 0x278, 0x288, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x8003, {}, [@common=@ipv6header={{0x28}}, @common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@multicast1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'veth0_to_bond\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @private1, 0x4}, 0x1c) [ 614.992573][ T7877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.044984][ T7877] usb 6-1: config 0 descriptor?? [ 615.121960][T24327] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 615.154135][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 615.188914][T24300] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 615.231348][T24332] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 615.298505][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.321616][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.355161][ T7877] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 2 vid 0x03F0 pid 0x6C17 [ 615.371517][ T7877] usb 6-1: USB disconnect, device number 16 [ 615.419569][ T7877] usblp0: removed [ 615.544902][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 615.578595][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.620639][ T7] usb 5-1: Product: syz [ 615.642147][ T7] usb 5-1: Manufacturer: syz [ 615.664651][ T7] usb 5-1: SerialNumber: syz [ 615.842732][T24338] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 615.878798][T24351] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 616.103772][ T7877] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 616.106775][T24310] loop4: detected capacity change from 0 to 2048 [ 616.363719][ T7877] usb 6-1: Using ep0 maxpacket: 32 [ 616.484088][ T7877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 616.498613][ T7877] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 616.510643][ T7877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 616.522792][ T7877] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 616.534111][ T7877] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 616.548640][ T7877] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 616.559044][ T7877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.598163][ T7877] usb 6-1: config 0 descriptor?? [ 616.747010][T24310] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 616.766322][T24310] ext4 filesystem being mounted at /root/syzkaller-testdir090813553/syzkaller.qyF8vA/8/file0 supports timestamps until 2038 (0x7fffffff) 07:29:28 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000010d0a2867753325d000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000280)=""/114) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:29:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) openat$vcsa(0xffffffffffffff9c, 0x0, 0x34280, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000000000000000008000000", @ANYRES32=r3, @ANYBLOB="0000ed5000000000280012000c006859c7b62859281e4b94ed4c82df3c72d888001d4163e36623fd1d4f8b507767aedfcb67f025ab"], 0x48}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$qrtrtun(r4, &(0x7f0000000340)="9bab4946e2c609cd4e17976930fe5d1525afd178e6dec8c6a314565df27a75bf93e437c4b51a5db287419ca1a10e58fa69febafb6d8635613273a70f4a1af0460ffb43734d9494a7a54a2467b42b25d08ac539ab0857217179eac6b1969d9c3e323f987a5683973ea4ca6a4f0c32c483b197ecff74579b6047836abf606a3203fb16e8e847753360dab01e4812bda3501d1760142109c7fac894d32b5b986ed5c52c5ae053152ece837bf952e008d25be415f54b97db287477cb485fd8a1d269686daa1d69c74897dc52a4874d90bec03c90ab2ce1", 0xd5) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) 07:29:28 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000002600000227bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="00000438e046ef00495d2741b834d64037070000000000000075b484925b6095c2cdbd804e6928afd9e062724450a4e6c25770f0"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c008) socket$packet(0x11, 0x2, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffffffffffe8e) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200e0000081060008001900000008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x50}}, 0x0) socket$inet6(0xa, 0x0, 0x2c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r3, 0x1, 0x6, @remote}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) 07:29:28 executing program 5: getpid() openat$mice(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9fa501009c49311c00006bf1cb490dec9f5a4e9d00120c00e7ff0b00000002000000000000000000000604"], &(0x7f00000004c0)=""/152, 0x26, 0x98, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x10, &(0x7f0000000380)={0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = gettid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x0, 0x10, 0x401, 0x8001, 0x101, 0x513, 0x4, 0x6, 0xffffff7a}, 0x0) 07:29:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'vfat\x00'}], 0xa, "009456c048da4ad9c0135078298e1dc95f7f9996611528318e1e90c8fa3cfd10998032574e8c3a27dddff433"}, 0x3d) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r2 = getpgrp(0x0) ptrace$setregs(0xd, r2, 0x7, &(0x7f0000000300)="ffb2c58fb70140c0e29a5404d4eef96dd3364df4de951cea1f5828b6683b9a895b6c27579127de3cc69ae784c418526b873f44ca46899477a27d740cc5a934970f11b9238fefe1e193607aff4b95a6e3be7d96a9ef887a7eb55a7190e6aed15a919b4bc2166b4dcf6bb8b57fc7e031c9db7d4849839b5e134a1f075bd061824856af") socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x407fffffff, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f00000009c0)=ANY=[]) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) unshare(0x0) chroot(0x0) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x0) [ 616.869892][ T7877] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 2 vid 0x03F0 pid 0x6C17 [ 616.883775][ T7] usb 5-1: 0:2 : does not exist [ 616.957033][ T7877] usb 6-1: USB disconnect, device number 17 [ 616.985438][ T7] usb 5-1: USB disconnect, device number 9 [ 617.023993][T24429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 617.047607][T24431] ubi0: attaching mtd0 [ 617.057857][ T7877] usblp0: removed [ 617.097954][T24431] ubi0: scanning is finished [ 617.149281][T24430] IPv6: sit1: Disabled Multicast RS [ 617.214600][T24431] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 617.249632][T24431] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 07:29:28 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff7d7, 0x9}, 0x0, 0x5, 0x8, 0x0, 0x37b5}, 0x0, 0xfdffbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="0f080f01df9aa0bb00001600b8010000000f01c1c4e28ddebf008000000f01c90fc7ad000000000f08440f20c0350c000000440f22c0c4c37d19ce00", 0x3c}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000140)=0x4ffe) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) migrate_pages(0x0, 0x4, &(0x7f0000000180)=0x87, &(0x7f00000001c0)=0x3) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) socket$inet(0x2, 0x3, 0x0) r3 = getpid() sched_setscheduler(r3, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) [ 617.270728][T24431] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 617.295445][T24431] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 617.325907][T24431] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 617.347220][T24431] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:29:28 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00000e4000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x492ed7e2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1495dc21}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, 0x70}}, 0x4) memfd_secret(0x0) [ 617.413643][T24431] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 617.447907][T24430] IPv6: sit1: Disabled Multicast RS [ 617.501886][T24431] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 617.536962][T24458] ubi0: background thread "ubi_bgt0d" started, PID 24458 [ 617.547861][T24440] ubi0: detaching mtd0 [ 617.564376][T24440] ubi0: mtd0 is detached [ 617.578390][T24431] ubi0: attaching mtd0 [ 617.588970][T24431] ubi0: scanning is finished [ 617.711380][T24431] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:29:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x9, 0x3, 0x5, 0x4, 0x7}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa000000, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00"/20, @ANYRES32=r2, @ANYBLOB="02000000"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x800) mmap$IORING_OFF_SQES(&(0x7f0000431000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) creat(0x0, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) creat(0x0, 0x0) 07:29:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x8c02c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x0, 0x0, 0x100000000}) sendfile(r1, r0, 0x0, 0x7ffff002) preadv(r0, &(0x7f0000000140), 0x0, 0x0, 0x2aa) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) dup2(r0, r1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200c011}, 0x8000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 07:29:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x1, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c42, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp, 0x41f0c, 0x0, 0x0, 0x1, 0x0, 0xffffffaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1b, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff, 0x4}, 0x8, 0x10, 0x0, 0xfffffeff}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) accept$unix(r1, &(0x7f0000000280), &(0x7f0000000040)=0x6e) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000300)={0x18, 0x0, {0x0, @multicast, 'syzkaller0\x00'}}, 0x1e) [ 618.142202][T24491] ubi0: attaching mtd0 [ 618.210036][T24491] ubi0: scanning is finished [ 618.952897][T24491] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 619.057302][T24491] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes 07:29:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) getrlimit(0x0, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x4, 0xed7e, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @can, @rc={0x1f, @any, 0x5}, @ethernet={0x1, @multicast}, 0x3, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)='veth0_macvtap\x00', 0x0, 0xeb, 0x7}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000240)=@buf={0xc9, &(0x7f0000000140)="dc66077562eb9d3893f217956ec2761c2cc435019ea5af6ff9e382ffc3dc24f328e74dcbf8b4e3e5c55f7b6a161e386b624447353b00f407db4b9debd5a3b56a8df2dddf64bf15654ed426020d9f1d99a9ce72501289947890e752a0c4915705954d815e4d160687b89f593a0a97f01b8a44fd18302fd9e9bcb6126d42a4be6ab338412b18e1d054186f06154e678535d425314737f11f13049f3cba98c5938acfda0e1f53a5ea8990a8057ac528822476073bd8c69d52d46fe7b90e474e8a3b0ad41e6e68690d6acf"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x1f4}}, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 619.119688][T24491] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 619.181439][T24491] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 619.214283][T24505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 619.235049][T24491] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 619.284204][T24491] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 619.325247][T24491] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 07:29:31 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x1, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x72, 0x2, 0x0, 0x0, 0x8}, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) getrlimit(0x0, &(0x7f00000000c0)) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x4, 0xed7e, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, @can, @rc={0x1f, @any, 0x5}, @ethernet={0x1, @multicast}, 0x3, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)='veth0_macvtap\x00', 0x0, 0xeb, 0x7}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000240)=@buf={0xc9, &(0x7f0000000140)="dc66077562eb9d3893f217956ec2761c2cc435019ea5af6ff9e382ffc3dc24f328e74dcbf8b4e3e5c55f7b6a161e386b624447353b00f407db4b9debd5a3b56a8df2dddf64bf15654ed426020d9f1d99a9ce72501289947890e752a0c4915705954d815e4d160687b89f593a0a97f01b8a44fd18302fd9e9bcb6126d42a4be6ab338412b18e1d054186f06154e678535d425314737f11f13049f3cba98c5938acfda0e1f53a5ea8990a8057ac528822476073bd8c69d52d46fe7b90e474e8a3b0ad41e6e68690d6acf"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="090000000000000005000000000000000200000000000000010400000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000004000000ba6b6e00000000000000000008000b000600000008001e0008000000bf000100626c616b6532732d3132382d78383600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8030000a9c8d0e9ffc3de18abf2d1429f5204c6072bf3cadff99cb6f0ab2cba8a9b70160ee6905c2ce011211b1687f92beb8a0fe6e5cff730ebb36b8a12779234771336ccd47297b4890659d6d934732863db643dc1d64137ae78d774a78984d9afe4cb5f4f5af09446e841dd445c2327b7402dcd64593ac7309f0008001e0002040000080016000700000028001700030000002bbd700029bd70002dbd70002abd70004000000003000000ff0f00000700000008001e00fbffffff2c00130000000000000000000000000000000001e00000020000000000000000000000000000000002000000"], 0x1f4}}, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 619.524201][T24505] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 619.555558][T24491] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 07:29:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f00000e4000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x688c, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x492ed7e2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1495dc21}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, 0x70}}, 0x4) memfd_secret(0x0) [ 619.622111][T24502] ubi0: background thread "ubi_bgt0d" started, PID 24502 [ 619.633272][T24496] ubi: mtd0 is already attached to ubi0 07:29:31 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x80, 0x7e, 0x90, 0x40, 0xc45, 0x610a, 0xfd92, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0x61, 0x44}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x0, 0x51, {0x51, 0x21, "98e205475adf7fcd4f57aceee1a750baad6add3d558799a9bda96daaa441ca60e03fef006417fa7b92f39c043731e8af37dc5532d28da38a25d1797411debe60b250142bffdc3772f9681b4048e943"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000100)={0x40, 0x3, 0x54, "a739973ca29ed35c8bf7890c99a52c227582e466e7376bb8a8d0e6cd6d36d35d96c4100901f32a329a14600829d2d5cfb88fb878bdb8bbe85c8cead3f67b4254f598bad113347cf8a4730ef094c72813c925e11f"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="00013900000012"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 07:29:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x40000, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="9f4a93ddfbb135e76742e3b818824b08c13674", @ANYBLOB="e544a46223eb9d16ab8b37161a1d063d3cb5a43651852753c2a9bed9dd79fcc4c8626b0c25f4d3ea2dbeb37e98f04613bc22bd196231b44b220f89352b14a46d015c7e657b96f4a98c3a7182241e0130c6e3fe3d9faec632b8c6550237f9cfdce23d9d841bbbd646a8a8805666820ce977c510c07eaf076e0b93cc0e9c9309cbf65701137ad5a54d776c9d9d10951f660ef0d205d48caef6cef875af38a4658261bf4fde96508ad734d1c9c8019c0600000000000000", @ANYRESHEX, @ANYRES32], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20000004}, 0xfffffffffffffeba, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r4, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='GPL\x00') socket$inet6_sctp(0xa, 0x800000000000001, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700006c000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38160000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000006400270d04367f71f54614cb000000004f716de8ae5b36cda1781b6b16738699702042acae690856aaef57b8a8fbcd0a603c6241177fa837986080b83efad85326d8cedc7799eb2715ab30a4336dd169b69283d590143892bac2b2d265dc2b7996c89d03dabde61de6eb838fe46b4e057649dbb80371df306d13bd7caee1ab4f2c77f6ef4756c0391bfc4b96c535726732662206bdbb94d318a425f3b1c30eaf7cb5f32ce64648e83ac0bfd4a74a9beefeaf161ffcffc5810732dfa1200bc44977c61dead5c42057b2d1aad7a43a163f057eb8cad2ef68dc570af25096039c58c46ecef8a9ceb49c9039850965f602c1e77dfc2aa6c8e1c9da0388422040db2338fd2a4f29acfc868f15a8539a524a59131165bc2517b6f5cbff7a4936318331b40ccfafdde2a2d47639a27841194a7b796cef6f", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000b000100666c6f776572000014000200100054800c0003800800010000000000"], 0x44}}, 0x0) [ 620.293608][ T20] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 620.340191][T24527] ubi0: detaching mtd0 [ 620.389219][T24527] ubi0: mtd0 is detached 07:29:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x7, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x34, 0x0, 0x0, 0x18, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r1}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000040)=0x1, 0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 620.733520][ T20] usb 4-1: New USB device found, idVendor=0c45, idProduct=610a, bcdDevice=fd.92 [ 620.766480][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.851402][ T20] usb 4-1: config 0 descriptor?? [ 620.947472][ T20] gspca_main: sonixj-2.14.0 probing 0c45:610a [ 621.049757][T24541] ubi0: attaching mtd0 [ 621.095888][T24541] ubi0: scanning is finished [ 621.243755][T24521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 621.314729][T24541] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 07:29:33 executing program 1: socket$inet(0x2, 0x2000000000003, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x30397cfbeca4eaa6, &(0x7f0000000080)=[{&(0x7f0000000040)="e028030029000305d25a80648c63940d0424fc60106c11400a210000013582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1932) 07:29:33 executing program 5: r0 = add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="315535a9ba8a2586e432e856192cefba83b22d7919d9cfd42c9d38767f0329d792a28373f6f20a3f5b42c132ab6e89bfa18da2d4ef960b94850f18a2871852cf0a30738672133c476238f16934b768543bfdcb55008a1dd8eb03beee6b6775f07349d2cf60b10834d9405410f15a196ba61b97ae26a293fd2a93eb1cbccefabcfc84279fdd5c25bcf3df8d337d2fea26cabd8ac15f5eb0021a", 0x99, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)={0x77359400}, 0x10) r1 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='\xad\x00', &(0x7f0000000380)='\'@]:\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_mount_image$qnx6(&(0x7f0000000280), &(0x7f0000000400)='./file0\x00', 0x9, 0x4, &(0x7f0000001680)=[{&(0x7f0000000440)="0bbabc28553a05392dc55998587504e50f068822bd2fbc", 0x17, 0x3}, {&(0x7f0000000480)="6fe5ac7595f5c0e584e30435c93975379150dfc754117190439b66f062a4d90aa29361ff6bafe8567b39ea7afafe6201fc80ba82bf6addce3edd15f86afa6679f011c307d93070fbfd31cc3defc01ab2d17ae8a63aa75b15461f0c00eaae49c9cb08aece772dd8d32df5a899c3cdde303723ab47fd20828309bf8f69e42ea5e3d69b236fadb788b84241daf3a6ce39850943732fef9ddf049a1337e68c8bc451199daa0d2dd51e772f545ab87ee425101b44d51216b5d8dcbca7b5dd37959116cc0ca8970002f7f0801da25fc6dd99b803aca7340007f6083d98e66a06f87f658b46d9f32e7c076d4404ced6b19aa9d93260db07cc9408f67838c1201b3a1c7c8c412b7049b2fa4fff5886207ca5f85117d5043c522806d57f0d62af319b6eab2eb7860b4f75b02a11d0d7b35ed7af33617da44b35178dcb159b8273299ec143fa427653b3159f8688c9029cdd9ce3bc931d017d8a8b5de915d700a06a8df99031d5a3c038dd2bcf0b38294c5c2c707b753a916e7005d0acc3c4013d1ed2e681b850757a512d9408f51cfcd6cb1d200f178e0478abaa82deb8cc5eb2dea98d28f070b863a23870af654c1c6bc0cde0d44374b716b3496dcd9dd1e858e212d041cce93e920f9add78ba19cc72d01623c594fcf6cf62bd8db94fdecea579581dd2340c48300f3fceed13c7be09629f81e93d530282497a00793f52a7eef0201c04a0e9e3ac88ddc22f0e22eb80cdff71ffc3350d81f5b7ab198b1ebaa4b9c897fc6e9fdea958086f88d8e18a70a739f77236f59625a7873552e8d5c7200e1a59994a6d3760748a5293054261db0b8214c6290a49fe7671445c3248357404130352a23f9296724b71e2cd190ccadae0c48ae1119cf8d2aa6d6f6b72298bf03536120fd63afd1d595b4ce5ad3ffb3c81d4e20272d234e52ffcd3e50a1566d132971120db95dea81ba68010850a4d73f85b5ea3d917f20bfe4eb6ce714d061a0996acddf2432e438b1d9bc3466aab26c143086478313bb3911de6374982b1a076fafa61b86ca486ea75cffa2ad17473b3de2615a73c38cdee4369004aae4a9426f19b87e760305868f22fce9a0b26d31531374876fcfa6260ba7fd6c4ff23155f163e0c6ccc0d84eda82b362e7e818252809ba915d3deb14f10ac21bf4c9169279e83b910e9c4a1aef57a57b7ab78bbb7f38bf9257504f47c80caccc6637d1628ffa008547b92b171c143b4b969b21afd641a27a77ce4be7920f1ef2fc83e65488bf341671cec6d82d47f3f422688639f699790b3226f14ab2470e868216899fdc5ce2579c6864a84b5859ce8a7f203b4ef2a2e215820690605bb57102575db6c898d34479a50cf37ce5aeff7bda9338a850be66e60b3341438e05fc484897e0c43fb58d9f383694899130234204ecfc18512886530174e08c92e9c59dcb01e00dbce97ce0bdf703d9da9b51db66e1875fb34103efd147ac6358f00b6f3ed38a356fd2187080b943fd87598a337d03a3825ab3b033b2fcb11a6f70a05d3f8d99f25b5a8f245e21e7f3c2474dfc8ae30ea10dcd6bb93323fa12735ccfea69c99d7bc9475ddd2fde1b7ab8fecb746317d8728c3d515d6704a5c8a4d626f5d227ab1f9d2b90551d4ec2e01f9d37aa070785dbbc2e8d78cc374a3d5bd55076334a2bc39b305c81397f9663f29b34a442debadc3eed96e783cf88ee0e7cdd25dab050606916ac0b8cb6bdbe8d2d564dbff559ff66b9ed13f6cfa3da639cc1982aedf699d94e2216b7d0c8f611d8e9ebfc00b52ef456e2a0ed8b2651b7f1d179af18066d2a6ed1d43d833f588d9b4a7a750a9795f7ea8aec117ddbff46b1a0324d178ae21d826536d419f9761f8d66b621aaf7cabbb7552c3bb9cb22510be1b54d84634328663a7a7c11941e1a122dc7946abb7c53b5de42a13d162e83c6f222a5dd5228698c337ebeb9b31d1f5d0d82479b1cb0f050a71d7345d9c368254ecda5b9193c6342fa2235a5ef388c17be0f1e075fb4da2e88ce40223fddb23b91f0b099716e074d3d19c2d726a1d2c74007f1eec964732d87acc08137a310bf017c75a55ea4ecc42540129aeb9d295a1368477a86a202e38e6a577448cccd7029da34048e19237d2bbbdaceecebde57bf2a1e64e48012e470590802931004986af0759bed02114be34b1585c67eab868c40a9ea5709001c8463daddf38b1e0e9d91c82bc330793c542fe904eab19e463d8ac575cfeba08478606a156d877c0bd5af5e026f278049569d62d0336c52844df692399cc46bbeb94bff6cae2707dfafe8c984787865c0968c39b516f0b9e5a259142d2d15696d7c14b65b1d1c1d2acc4c65d1d08c8308c137d6c743611ce258bbc1594b63f01376ad1ef6c04eb92c64ed8ca7f9ab1f5942e6f02815f214f0281cd3cf4a8f2b72f6604dbcf999fea2b1a9d19f6a82abc10aa77aebfbf091ec3364844e27dad24e219c54c8638063405ff59fe29a13dd93489bb92a546859f52a20e1b9d03a47b0f5f7f324fc48c12edde2743a287fc06f65b9c89e6685ab393cadcf30782befa833671a9e73d4fb88ac57010a4ab01fbc28011a988c70b8644c5d97221b39ea66404aff8cef4e5e6fde5878cc0f9929c29b2041331b7f5055f7c1b01331638e62fa34188931fb5e240dfd0ea8a6c7334d82e6df2eb52bc2425a14f3611a6052f0aca7fa15a46db25a17ef60af0f3a97de94403ebfd12ca973e0ede75dac9c43e834fce191e9946d0e97a630349c73ca2a8de2ceb304da50d6e4095848244d60ed9bf4141646a9c90712cdfa25e7a41b6ee1b529f0ca08f70c250944fe405ad352ee8dfd54af6415e0a9e92dad8a8b1ddc70573233f0efa8215f6dfcefa76442566188cdf8f80693ebf5daba6327e78774cac8df19c6cf000136cfd13dae9bad481c364af0418744aca5b2431de554e014f85601f62b9d3f1ef0e3c187ac4d93ae167f75535549f0d24e8052253b4eb716222b09ec78bda60d89eccd5d5c128daa1b9322e4431017cb567d6d9d2542bf61ae0fc9df07dd71ea74a7d765a1b6d3b7a16dc4c2b9c33a6fd42230c691939cb72085bcd4d742a3efe4ed65308aafbf103f0e65ac375d387f233ef056752cd59a7597cd24fe3c28aaf539efdd09082283767d4f6cea0cb9f0cfbd8dc0b09a0df779d5a93b06f09f7b6036eb274b41118783a810370ce733c3488aeb157ad363a48ab55530b5bc567e9c7b3269017a9e94799f4e0282ba0c0d0eec15e69ab6bd954d51a0e3fb1cf6cc08d999f4e2535a7de50875d8b3c561c1bb086f3bc04a6cb7ff871246f0d36388113a006af8c7a301a15d2e65869eed8f0480d65bab89e0dc49df99d9cbbf4f1af3203a326f82ffbd0e1540062539ec73f00e26e5cd1c81f363d4319979ee49546915add5b914fae2d8c89e3db403662e3175a21215c162fbc8bbf64133623776bd7b445bf07bf9dcf21012ac2325a282485db964c9b4725a308031711b97b33040e35221b9f39fcfce9e20ff205c602697f3d286943c45b57a45ac0498ac4f0415b31ea821039abaaf63fb4da8b95ab76ad0d5fa61d31fb5c7c267e163b65b14a12fd887a1becb98a17c473ed512baee14dcafdeecdba51c77484252dcd380e00667244a33fba459895167e78dc424198a030f71a8fdc24c330f094fe1bac186cb0ff6bf86a3ad4b45ecebb1ab06c41d613ed79ae606941358e3912f452eb03ced01608dcffde0426507c891d06fab34e5ad836219e6f7ba75dd3f16c5354b1343d13bd5817a649e29aed47310be9aff06bc33833a9929f338dabec9cae3125712030d5e6fb96f897b4e1f5b8b244476070f908f9ab7821c080bfc8b69c9333c7f05bb0587575e9ded63747481336309adae70776469654ddf887d28dca236d4de7f59844d77f3e7233f0865d7c30c23264679a03bbdbabb406c48c2804c993f94c00150aa20f35eb42d6eaf3eac258e4391765db4874941307ea1456afdcda02804b9a8d71f6f1b99c6a53c5f96d4409d9427d4d441f31e3f229c7ee82d3f9440752a4ac2ba7545e453461627157e0a01a6157192fa5827f09b2d916df1856088a397e905849b1da2a6e613d9413bcf18f2f7fb448d832da405fbb3aec72ba40e8fa275b57454dcc2fba5f2dc26f6f62bb30d0c1fee2254253be5c5567436ac3917272c5aed9adb4067404558a86226d7e86eb8e84095b9590517db0aca4f37964141f0028a648031480211c5464d333a95eb8822094ab2621efcee62da87cc1f5b84298c6f4c4e066dc6213c42c0785a80917f45b063cca319703bd80f49b9ae7a927a2c359abcdb53087bf832ded19d5e24db051c7b23eef59e8a46f1dc766195b32051445717df516dc1a1db2465a40a9b4de52cc4d95145db4de8ae9afa03ac3c48e87efc92822a70352832d49a65167f8c1de2604d185c34a9cc822a1f29ea2dc7305e82f9a447c9f2b428efaa3d387284b4ba911255f4f9c2f75a3132264d4d2bf6e8d71c8f1bfd7977c2e0b5b70df14b7387b097ebdc3b87ad9dbdb1f6226293bfcd39684100fd90dc1a91a7db00a21d32eef0f3cee186857418e55f2848762ea6c882fac12196f84aa60f24e529a36bd70a44da6d706ec74700699104766b6cf286a7745146921dad0dd99e8842eecec2b6528528c53781044e99e27b67eef138b539df0ab2750b601c7540c94f0a3d21ae51a2b8c7ee62452b6f4de74853bc3263aa5897537a2fbda9fb8a14e21d2799c68226a04c8a4a63e8b002d50d8ed8c5d903e81869aba310e4d1c1307d5c6806a32a3cfedafd0081c172695a767719ad1131247a86fb7355f2107db0a037e25e89afc368459d34f071d907aef6e1499413c63ae90b215959dbaaded65e12216de9f7164f2b8ad596a767213ad148c405f8cda4eb21f2629d1ba7cf581ba3f58e07e52a036ea26b82517b1a4b72e9b791cdfca3aab4f55fd6afe7fe521043baac39f62700bcd545bf665a0da487af68d03be717c613633afe3e06954411828b5b24eacca0471be891d3ba02a5af7f39ac6d81a2fc690a9039766571cada10c731ce6e92e4229d7fd5af541b921b4f1cb7963e92facae9a3a8825ea9e3c2c085c57d161c779441ecfa35761ad5a91b9996e6048894667db69d34510a93668cd4893995a701889573a25aae803bd2f778ada15ff59ff746e53360a30fc78f518c261835202a190142652268820373d09926a5a17f24d6073f1024d77d123a44c66668fd2770b4491a07f4c5ae8b02a70a906a8c8940bf50b3186b41cc47aa5d66a66635e5f12fdbcee4c73ad1a985e2e45410f19971cd61568471fbb842be07ae7232e04298a487fcba17e21e4b9f3c3a9383467542fe365d18a02c111ba5d312e090d3c2e401ab00d8bbf00cc7a6b53258849d2bddadd7e803238b951357cca218ad61508472fe7eb91ec59dba4108b79fc4c93fb48b1ad825d4d43945358726170c60ac03599230b4121363105f3fb30c6cf1775319a1eeead3d3fe5db477de4ff97b3d5ddbf782052716dc727257b599c318a0698694059017ab77cf460019270f4418cd7e698c1092ae8a482b3b83efd070dc739438ceec60ac8d6420ab6a5fb8dc41cbaf207b27c037bc8aa1130aaf7a5105812c5759fee9b6061bd77aadadba977b543dcfe2748ad4ac42beb40a77d79ab06cfca321b10534fb71e168316df3d459df0f0261c86d89aaaf24079bb2486dd95dca0dd1c854f6b87c6db0aa149aa99590cdd3cd047fc156e26469d90bbe35bef4d664482c807b58186bac333a4dbe9", 0x1000, 0x7}, {&(0x7f0000001480)="dc717fd1f5e7015410c0589c2d52ea11d27be0dfba4e185fbd9ec99c0da4e8fe288c0e49e67620e1436bf6684907ebaa7677492ea8ad7e73991ce6ef243b294d679adccee144bd1ac6796586c30f87aa8e1b683499983f855fcc3070669b4e4233d931e52c7bf55923ee3a722121e6f3c924d08a0f10105ece860c5813304527b72367fba3240643170b84965bdaf88dacb130775ac343521628e26aff9b4ad69f1d91350185f0db037729b22f343178a9c2b943aea12bcf7c4c97e3f18542987486f528a9ed70f72f93fd63e1286afda9be4e3fa7e04af6fee8d96d405d68df371bb1", 0xe3, 0x53f7}, {&(0x7f0000001580)="8464c18f14fcb004f419436eec095590f675224ddfb4ff0543bd7206e0bd68ddc453680851fab81815067e9b08d767cfd00bf68b6fa388f38380b3ec812e6d97a6a910e2e93f78ef835d0f8485a776d4c6eb76f0e29d5330f6513174f965705673e29e9c16a7f06c1ad2220da94d7155fce186322bf4ad95e5d381a77ddef3c4e891d68731a3479c42001959875e7d62421d25ce17ccbad6df27d4ff212a46c06d850d936ae5dfa3bbb919f4cafcb7ae4c6554d3d7acd1f7f4ce59ae9122c301150253", 0xc3}], 0x9, &(0x7f0000001700)={[{'syz'}, {'\xad\x00'}, {'%}'}, {'user\x00'}, {'\xad\x00'}, {'$)^/!'}, {'#*\'^:\\%##(['}, {'devpts\x00'}], [{@smackfsdef={'smackfsdef', 0x3d, ',+'}}, {@euid_gt={'euid>', 0xee00}}, {@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, 'keyring\x00'}}]}) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000240), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) close(r1) 07:29:33 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000089a173d2000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@getroute={0x14, 0x1a, 0x20, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 07:29:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x4}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:29:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, &(0x7f00000000c0)={0x9, 0x3, 0x5, 0x4, 0x7}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000080)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa000000, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00"/20, @ANYRES32=r2, @ANYBLOB="02000000"], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x800) mmap$IORING_OFF_SQES(&(0x7f0000431000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) creat(0x0, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) creat(0x0, 0x0) [ 621.817158][T24557] netlink: 179388 bytes leftover after parsing attributes in process `syz-executor.1'. [ 621.827764][T24556] ubi0: attaching mtd0 [ 621.838474][T24559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 621.841768][T24556] ubi0: scanning is finished [ 621.905658][T24566] loop5: detected capacity change from 0 to 83 [ 621.979315][T24559] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 622.003140][T24566] qnx6: invalid mount options. 07:29:33 executing program 4: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat(0xffffffffffffffff, 0x0, 0x448580, 0x4a) preadv(0xffffffffffffffff, &(0x7f0000001480)=[{0x0}, {&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000000280)=""/165, 0xa5}, {&(0x7f0000001400)=""/71, 0x47}], 0x6, 0x7, 0x40) shutdown(0xffffffffffffffff, 0x1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x50) close(0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) readahead(0xffffffffffffffff, 0xffffffff, 0x8) unshare(0x38020c00) [ 622.169991][T24581] loop5: detected capacity change from 0 to 83 [ 622.188600][T24581] qnx6: invalid mount options. [ 622.212643][T24556] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 622.223883][T24556] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 622.231119][T24556] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 622.241894][T24557] netlink: 179388 bytes leftover after parsing attributes in process `syz-executor.1'. 07:29:33 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="00040000ec0100001302000012000000000000000002000000010000611cad49e10000001e000000000000000010ec03020001005265497345723346730000000300000002000100000001020100000003000000000000000000000000000000000000000000000000000000000000000000000001001e003ac1655f004eed00", 0x80, 0x10000}, {&(0x7f0000010100)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1000, 0x11000}, {&(0x7f0000011100)="00000000000000000000000012000000000000000002000000010000611cad49e10000001e00"/64, 0x40, 0x212000}, {&(0x7f0000011200)="01000200750f0000000000000000000000000000000000000100000002000000000000000000000000002000e00f0020010000000200000001000000f401000002002300bd0f1000"/96, 0x60, 0x213000}, {&(0x7f0000011300)="000000000000000000000000000000000000000000000000000000000001000000010000000200000022000400020000000000000001000000200004002e2e2eed4103005cf9535f230000003ac1655f3ac1655f3ac1655f01000000ffffffff", 0x60, 0x213fa0}], 0x200000, &(0x7f0000011400)) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40400, 0x82) [ 622.369305][T24556] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 622.419617][T24556] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 622.483826][T24556] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 07:29:34 executing program 1: sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x8010) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x101082}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x94, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4e521618c8"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "885494a466"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4d696c08096054c3a6269df755"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "9771ae96fa2ada2f682e68e3aada1a"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8445}, 0x20000000) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0x2008040) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000780), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24008050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) r2 = syz_open_dev$vcsu(&(0x7f0000000900), 0x8, 0x90200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x2}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x48}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}]}, 0x38}, 0x1, 0x0, 0x0, 0x90}, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000a80), 0x4000, 0x0) readahead(r5, 0x8, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_SET(r6, &(0x7f0000000bc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, 0x3e9, 0xa, 0x70bd27, 0x25dfdbff, {0x18, 0x0, 0x0, 0x0, 0x1, 0xc0, 0xffffffff, 0x81, 0x0, 0x5}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r3, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x500000, 0xd}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfc9}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c011) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xc8, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2441}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x4040) r7 = signalfd(r0, &(0x7f0000000ec0)={[0x1]}, 0x8) signalfd(r7, &(0x7f0000000f00), 0x8) perf_event_open(&(0x7f0000000f40)={0x5, 0x80, 0x7f, 0x5, 0x6, 0x80, 0x0, 0x2, 0x408, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x40, 0x3}, 0x1019, 0x4, 0x9, 0x3, 0xc000000000, 0x9, 0x0, 0x0, 0xcc, 0x0, 0x4010000}, 0x0, 0xb, 0xffffffffffffffff, 0x1) [ 622.580437][T24610] loop5: detected capacity change from 0 to 8511 [ 622.587422][T24556] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 622.698317][T24556] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 622.724144][T24610] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 622.797762][T24610] REISERFS (device loop5): using ordered data mode [ 622.823494][T24592] ubi0: background thread "ubi_bgt0d" started, PID 24592 [ 622.830689][T24565] ubi0: detaching mtd0 [ 622.840445][T24565] ubi0: mtd0 is detached 07:29:34 executing program 1: mkdir(&(0x7f0000000580)='./bus\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x2, 0x8) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x2, 0x8, 0x5, 0x40, 0x0, 0x7c, 0x42910, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0xe}, 0x400, 0x8000, 0x0, 0x9, 0x8000, 0x0, 0x4, 0x0, 0x200, 0x0, 0x7}, 0xffffffffffffffff, 0xf, r0, 0x0) chroot(&(0x7f0000000780)='./bus\x00') [ 622.849615][T24574] ubi0: attaching mtd0 [ 622.855512][T24574] ubi0: scanning is finished [ 622.888723][T24610] reiserfs: using flush barriers [ 622.936693][T24610] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 622.999148][T24574] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 623.025574][ T7] usb 4-1: USB disconnect, device number 19 07:29:34 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x51108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x0, 0x7}, 0x0, 0x0, r3, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000180)={[{0x5, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0x101}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x5, 0x5}, {0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0x8, 0x2, 0x81, 0x7}], 0x7ff}) clone3(&(0x7f0000000300)={0x1001000, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000200), {0x12}, &(0x7f0000000540)=""/233, 0xe9, &(0x7f0000000640)=""/252, &(0x7f0000000280)=[r0], 0x1}, 0x58) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000040)="0f0836660f3a633ea4c4e1bc5649deec9a13000000fb00f00fb18500000000670f01cb660f388054fe04660f3a0aef07cf66ba410066ed", 0x37}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f00000000c0)={0xc1, 0x0, 0x2}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r5, 0xf505, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) [ 623.067911][T24610] REISERFS (device loop5): checking transaction log (loop5) 07:29:34 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = signalfd4(r1, &(0x7f00000000c0)={[0x41b5943d]}, 0x8, 0x80000) r4 = accept4$tipc(r2, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000180)={r4}) sendmsg$nl_route(r2, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="017e000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004240)=@delchain={0x24, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 07:29:34 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000060600000000000000008efe63d5006f00000095", @ANYRESOCT, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x19, 0x10, &(0x7f00000018c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYBLOB="0000000002000000850000004c1109898800000000f0b60000b3dc8f3abd112aaaee0e18a441f8cac56fd9e7a8006003000000000000b87bb47c22ecffff"], &(0x7f0000000180)='GPL\x00', 0x0, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0xc, 0xa, 0xce95}, 0x10, 0x0, r3}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x1, 0x6, 0x3, 0x8, 0x80, 0xfffffffffffffff0}, @generic={0x7, 0x2, 0x2, 0x9}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x5, 0x4, 0x796}, 0x10}, 0x78) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) 07:29:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = fork() r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') readv(r1, &(0x7f00000001c0)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, r1, 0x0, 0x6, &(0x7f0000000180)='+/*:}\x00'}, 0x30) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) r3 = syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xa9, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000280)="f4bf65f4a9bf5b5cfec88a845b12a9a52975f08e19bcad757ee78a6bc43d09e4b371921981d5ffc572d3f58ea171e0e7f5d5fbe6a6450472eefc4110017762642499fe00f1bed1460b0ed8f76dbbcd0e82d5015045ede54b7494652d070395a09e00f8a9bf17f38c81679f1b040a7e27d1218525dc6b2ff61543695585adc869ea1bcdff118b7e", 0x87, 0x7}, {&(0x7f0000000340)="f895b971841a837f81d36336cbc756b3d34583faa11274fc94ef4f26c7cecd732a78c14d2be1132b58f2a19146b3f86f56f3a432bc94858c851e6b1e38be5f3f15fb17aca57b73a3689abf93f45d5e80b7db49d9c847613800175d5c0195bc58", 0x60, 0x8}, {&(0x7f00000003c0)="96b708c69c15e28336bd85e6d1f4298e786f61c4a8da7993761d782cc17fa5f2a0497d60ba76e799685f0a62b05b4c8e0f9d44166fc2577d17182fc5f02c7c1575b713ab8240bb663acf6b2a11694e4a39b77e782993ad1290a65228a72c85d284b37e65548864df3be96885162659166433444406fb5ec9a09662d26cbd4e3fdd7c335669103cac525a2cbee247812e1c2dc6fc7585e89fd131afe914b4bde7ac371de6efb34cc317277d9b96bc1c07a9e92d28ce619a7d5a61773b4910d27304aba9e0f2fd872601e871a4549e0d0a932ac2", 0xd3, 0x5}, {&(0x7f0000000140)="b4ca246580bf4e3616d86c060332d22d928974c7ddf90243fa8b777dd047", 0x1e, 0x1f}, {&(0x7f00000004c0)="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", 0xff, 0x7}], 0x19820, &(0x7f0000000640)={[{@noattr2}, {@sunit={'sunit', 0x3d, 0x4}}, {@prjquota}, {@pqnoenforce}, {@nogrpid}, {@pquota}, {@noikeep}], [{@fsname={'fsname', 0x3d, '[[.9\\['}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@dont_hash}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000600)={{}, r4, 0x10, @unused=[0x1, 0x1ff, 0x10001, 0x2], @subvolid=0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"5e3acfc1578958c17eca5ebb7bb45d67", r4, 0x0, {0x200}, {0x0, 0x7}, 0x0, [0x6, 0x995, 0x80000001, 0x7, 0xfffffffffffffffc, 0x0, 0x5, 0x81, 0x80000001, 0x5, 0x1, 0x0, 0x32, 0x3, 0xffff, 0x1]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000780)={0x0, 0x10000, 0x3ff, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000b80)={{r3}, r4, 0x0, @inherit={0x78, &(0x7f0000000700)={0x0, 0x6, 0x8, 0x80000001, {0x24, 0x100, 0x20, 0x800, 0x4}, [0x8, 0x0, 0x1, 0x400, 0x9, 0x4]}}, @devid=r5}) r6 = openat2(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x250080, 0x84, 0x10}, 0x18) ioctl$VIDIOC_QUERY_DV_TIMINGS(r6, 0x80845663, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) [ 623.450864][T24648] ubi0: attaching mtd0 [ 623.481892][T24648] ubi0: scanning is finished [ 623.501969][T24642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 623.642980][T24648] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 623.657883][T24648] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 623.688267][T24648] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 623.751707][T24610] ================================================================== [ 623.760384][T24610] BUG: KASAN: use-after-free in reiserfs_read_locked_inode+0x1e47/0x2160 [ 623.768924][T24610] Read of size 4 at addr ffff88808189c000 by task syz-executor.5/24610 [ 623.774587][T24648] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 623.777174][T24610] [ 623.777236][T24610] CPU: 0 PID: 24610 Comm: syz-executor.5 Not tainted 5.16.0-rc2-next-20211125-syzkaller #0 [ 623.777267][T24610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.777283][T24610] Call Trace: [ 623.810261][T24610] [ 623.813204][T24610] dump_stack_lvl+0xcd/0x134 [ 623.817831][T24610] print_address_description.constprop.0.cold+0xa5/0x3ed [ 623.824889][T24610] ? reiserfs_read_locked_inode+0x1e47/0x2160 [ 623.830980][T24610] ? reiserfs_read_locked_inode+0x1e47/0x2160 [ 623.837073][T24610] kasan_report.cold+0x83/0xdf [ 623.841872][T24610] ? reiserfs_read_locked_inode+0x1e47/0x2160 [ 623.847967][T24610] reiserfs_read_locked_inode+0x1e47/0x2160 [ 623.853891][T24610] ? do_raw_spin_lock+0x120/0x2b0 [ 623.858948][T24610] ? sd_attrs_to_i_attrs+0x260/0x260 [ 623.864343][T24610] ? find_inode_nowait+0x1a0/0x1c0 [ 623.869481][T24610] ? mutex_lock_io_nested+0x1150/0x1150 [ 623.875050][T24610] ? do_raw_spin_unlock+0x171/0x230 [ 623.880301][T24610] ? iget5_locked+0x1c4/0x2e0 [ 623.885022][T24610] reiserfs_fill_super+0x1350/0x2f80 [ 623.890344][T24610] ? reiserfs_remount+0x1530/0x1530 [ 623.895566][T24610] ? sget+0x472/0x580 [ 623.898087][T24648] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 623.899614][T24610] ? snprintf+0xbb/0xf0 [ 623.899720][T24610] ? vsprintf+0x30/0x30 [ 623.914767][T24610] ? wait_for_completion_io+0x270/0x270 [ 623.920350][T24610] ? up_write+0x148/0x470 [ 623.924706][T24610] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 623.930976][T24610] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 623.936724][T24610] ? set_blocksize+0x2e5/0x370 [ 623.941613][T24610] mount_bdev+0x34d/0x410 [ 623.945966][T24610] ? reiserfs_remount+0x1530/0x1530 [ 623.951186][T24610] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 623.956330][T24610] legacy_get_tree+0x105/0x220 [ 623.961179][T24610] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 623.967486][T24610] vfs_get_tree+0x89/0x2f0 [ 623.970215][T24648] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 623.971928][T24610] path_mount+0x1320/0x1fa0 [ 623.971967][T24610] ? kmem_cache_free+0xba/0x4a0 [ 623.972004][T24610] ? finish_automount+0xaf0/0xaf0 [ 623.972041][T24610] ? putname+0xfe/0x140 [ 623.998514][T24610] __x64_sys_mount+0x27f/0x300 [ 624.003407][T24610] ? copy_mnt_ns+0xae0/0xae0 [ 624.003525][T24648] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 624.008031][T24610] ? syscall_enter_from_user_mode+0x21/0x70 [ 624.008079][T24610] do_syscall_64+0x35/0xb0 [ 624.008110][T24610] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 624.008140][T24610] RIP: 0033:0x7f5e666f401a [ 624.019080][T24648] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 624.024076][T24610] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 624.024104][T24610] RSP: 002b:00007f5e65667fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 624.024132][T24610] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f5e666f401a [ 624.024150][T24610] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f5e65668000 [ 624.024169][T24610] RBP: 00007f5e65668040 R08: 00007f5e65668040 R09: 0000000020000000 [ 624.024186][T24610] R10: 0000000000200000 R11: 0000000000000206 R12: 0000000020000000 [ 624.024204][T24610] R13: 0000000020000100 R14: 00007f5e65668000 R15: 0000000020011400 [ 624.024239][T24610] [ 624.024248][T24610] [ 624.024253][T24610] The buggy address belongs to the page: [ 624.024264][T24610] page:ffffea0002062700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x8189c [ 624.029664][T24665] ubi0: background thread "ubi_bgt0d" started, PID 24665 [ 624.034548][T24610] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 624.034581][T24610] raw: 00fff00000000000 ffffea0002062748 ffff8880b9c40140 0000000000000000 [ 624.034616][T24610] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 624.034630][T24610] page dumped because: kasan: bad access detected [ 624.034642][T24610] page_owner tracks the page as freed [ 624.034650][T24610] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 21718, ts 549829566702, free_ts 550946257184 [ 624.034690][T24610] get_page_from_freelist+0xa72/0x2f40 [ 624.034719][T24610] __alloc_pages+0x1b2/0x500 [ 624.040762][T24652] ubi0: detaching mtd0 [ 624.049106][T24610] alloc_pages_vma+0xf3/0x7d0 [ 624.049206][T24610] shmem_alloc_page+0x11f/0x1f0 [ 624.049232][T24610] shmem_alloc_and_acct_page+0x161/0x10b0 [ 624.049256][T24610] shmem_getpage_gfp+0xb2d/0x23a0 [ 624.049279][T24610] shmem_fault+0x1b4/0x750 [ 624.049300][T24610] __do_fault+0x10d/0x790 [ 624.239490][T24610] __handle_mm_fault+0x2771/0x4170 [ 624.244614][T24610] handle_mm_fault+0x1c8/0x790 [ 624.249385][T24610] __get_user_pages+0x522/0xfb0 [ 624.254237][T24610] populate_vma_page_range+0x24d/0x330 [ 624.259701][T24610] __mm_populate+0x1ea/0x3e0 [ 624.264294][T24610] vm_mmap_pgoff+0x20e/0x290 [ 624.268891][T24610] ksys_mmap_pgoff+0x79/0x5a0 [ 624.273568][T24610] do_syscall_64+0x35/0xb0 [ 624.277992][T24610] page last free stack trace: [ 624.282654][T24610] free_pcp_prepare+0x414/0xb60 [ 624.287519][T24610] free_unref_page_list+0x1a9/0xfa0 [ 624.292721][T24610] release_pages+0x3ed/0x1b30 [ 624.297463][T24610] __pagevec_release+0x77/0x100 [ 624.302318][T24610] shmem_undo_range+0x94e/0x1b00 [ 624.307269][T24610] shmem_evict_inode+0x3a4/0xbd0 [ 624.312225][T24610] evict+0x2ed/0x6b0 [ 624.316125][T24610] iput.part.0+0x539/0x850 [ 624.320551][T24610] iput+0x58/0x70 [ 624.324196][T24610] dentry_unlink_inode+0x2b1/0x460 [ 624.329323][T24610] __dentry_kill+0x3c0/0x640 [ 624.333921][T24610] dput+0x738/0xbc0 [ 624.337732][T24610] __fput+0x3ab/0x9f0 [ 624.341718][T24610] task_work_run+0xdd/0x1a0 [ 624.346228][T24610] get_signal+0x1b01/0x28b0 [ 624.350821][T24610] arch_do_signal_or_restart+0x2a9/0x1c40 [ 624.356594][T24610] [ 624.358923][T24610] Memory state around the buggy address: [ 624.364547][T24610] ffff88808189bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 624.372621][T24610] ffff88808189bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 624.380683][T24610] >ffff88808189c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 624.388748][T24610] ^ [ 624.392809][T24610] ffff88808189c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 07:29:36 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xfeffffff, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(0x0, 0x0, 0x5, r2, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0xdc, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4049, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x80000000}, 0x20000, 0x4, 0x7ff, 0x0, 0xd, 0xe3, 0x4, 0x0, 0x5, 0x0, 0x9}, r0, 0x2, 0xffffffffffffffff, 0x8) getpid() perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x20, 0x0, 0x3, 0x3c3a3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x845, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x7ffffffc, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x8, 0xffffffffffffffff, 0xd) r3 = syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) flistxattr(r3, &(0x7f0000000500)=""/196, 0xc4) r4 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000240)=[{&(0x7f0000000040)="040800090000ff01e66174000404090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000380)={[{@fat=@nfs}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0x0) open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x6, 0x1, 0x7e, 0xff, 0x0, 0x3, 0x30002, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000280), 0x8}, 0x18000, 0x6, 0x4, 0x6, 0xffffffffffffffff, 0x1, 0x80, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r1, 0x1) [ 624.400871][T24610] ffff88808189c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 624.408943][T24610] ================================================================== [ 624.416997][T24610] Disabling lock debugging due to kernel taint [ 624.434265][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.437538][T24652] ubi0: mtd0 is detached [ 624.440589][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.531852][T24648] ubi0: attaching mtd0 [ 624.537198][T24648] ubi0: scanning is finished 07:29:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = fork() r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') readv(r1, &(0x7f00000001c0)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, r1, 0x0, 0x6, &(0x7f0000000180)='+/*:}\x00'}, 0x30) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) r3 = syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xa9, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000280)="f4bf65f4a9bf5b5cfec88a845b12a9a52975f08e19bcad757ee78a6bc43d09e4b371921981d5ffc572d3f58ea171e0e7f5d5fbe6a6450472eefc4110017762642499fe00f1bed1460b0ed8f76dbbcd0e82d5015045ede54b7494652d070395a09e00f8a9bf17f38c81679f1b040a7e27d1218525dc6b2ff61543695585adc869ea1bcdff118b7e", 0x87, 0x7}, {&(0x7f0000000340)="f895b971841a837f81d36336cbc756b3d34583faa11274fc94ef4f26c7cecd732a78c14d2be1132b58f2a19146b3f86f56f3a432bc94858c851e6b1e38be5f3f15fb17aca57b73a3689abf93f45d5e80b7db49d9c847613800175d5c0195bc58", 0x60, 0x8}, {&(0x7f00000003c0)="96b708c69c15e28336bd85e6d1f4298e786f61c4a8da7993761d782cc17fa5f2a0497d60ba76e799685f0a62b05b4c8e0f9d44166fc2577d17182fc5f02c7c1575b713ab8240bb663acf6b2a11694e4a39b77e782993ad1290a65228a72c85d284b37e65548864df3be96885162659166433444406fb5ec9a09662d26cbd4e3fdd7c335669103cac525a2cbee247812e1c2dc6fc7585e89fd131afe914b4bde7ac371de6efb34cc317277d9b96bc1c07a9e92d28ce619a7d5a61773b4910d27304aba9e0f2fd872601e871a4549e0d0a932ac2", 0xd3, 0x5}, {&(0x7f0000000140)="b4ca246580bf4e3616d86c060332d22d928974c7ddf90243fa8b777dd047", 0x1e, 0x1f}, {&(0x7f00000004c0)="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", 0xff, 0x7}], 0x19820, &(0x7f0000000640)={[{@noattr2}, {@sunit={'sunit', 0x3d, 0x4}}, {@prjquota}, {@pqnoenforce}, {@nogrpid}, {@pquota}, {@noikeep}], [{@fsname={'fsname', 0x3d, '[[.9\\['}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@dont_hash}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000600)={{}, r4, 0x10, @unused=[0x1, 0x1ff, 0x10001, 0x2], @subvolid=0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"5e3acfc1578958c17eca5ebb7bb45d67", r4, 0x0, {0x200}, {0x0, 0x7}, 0x0, [0x6, 0x995, 0x80000001, 0x7, 0xfffffffffffffffc, 0x0, 0x5, 0x81, 0x80000001, 0x5, 0x1, 0x0, 0x32, 0x3, 0xffff, 0x1]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000780)={0x0, 0x10000, 0x3ff, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000b80)={{r3}, r4, 0x0, @inherit={0x78, &(0x7f0000000700)={0x0, 0x6, 0x8, 0x80000001, {0x24, 0x100, 0x20, 0x800, 0x4}, [0x8, 0x0, 0x1, 0x400, 0x9, 0x4]}}, @devid=r5}) r6 = openat2(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x250080, 0x84, 0x10}, 0x18) ioctl$VIDIOC_QUERY_DV_TIMINGS(r6, 0x80845663, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) 07:29:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xd2f9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x40186f40, 0x20006000) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$inet6(r2, &(0x7f0000000280)="e994b514b09d3570c8f82c593007f2142dc06ec1846a3b7f522053d3f4e7a69462206b76e7be32924a01e79cb07a00e864330d254024f653c9a5a0b8401206f55c18b11de98cbd08dd2f76badf9bd1761ad29a737cd786e87f6b1bdccdec3055b2d4e8426e3130e69ea153", 0x6b, 0x24048004, &(0x7f0000000040)={0xa, 0x4e24, 0x10000, @local, 0x80000000}, 0x1c) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40046f41, 0x20000000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) listen(r0, 0x10003) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x20000, 0x0) socket$inet6_sctp(0xa, 0x800000000000001, 0x84) [ 624.763930][T24648] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 624.863756][T24719] ubi0: attaching mtd0 [ 624.868606][T24719] ubi0: scanning is finished 07:29:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = fork() r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') readv(r1, &(0x7f00000001c0)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, r1, 0x0, 0x6, &(0x7f0000000180)='+/*:}\x00'}, 0x30) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@newtfilter={0x44, 0x64, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}}, 0x0) r3 = syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0xa9, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000280)="f4bf65f4a9bf5b5cfec88a845b12a9a52975f08e19bcad757ee78a6bc43d09e4b371921981d5ffc572d3f58ea171e0e7f5d5fbe6a6450472eefc4110017762642499fe00f1bed1460b0ed8f76dbbcd0e82d5015045ede54b7494652d070395a09e00f8a9bf17f38c81679f1b040a7e27d1218525dc6b2ff61543695585adc869ea1bcdff118b7e", 0x87, 0x7}, {&(0x7f0000000340)="f895b971841a837f81d36336cbc756b3d34583faa11274fc94ef4f26c7cecd732a78c14d2be1132b58f2a19146b3f86f56f3a432bc94858c851e6b1e38be5f3f15fb17aca57b73a3689abf93f45d5e80b7db49d9c847613800175d5c0195bc58", 0x60, 0x8}, {&(0x7f00000003c0)="96b708c69c15e28336bd85e6d1f4298e786f61c4a8da7993761d782cc17fa5f2a0497d60ba76e799685f0a62b05b4c8e0f9d44166fc2577d17182fc5f02c7c1575b713ab8240bb663acf6b2a11694e4a39b77e782993ad1290a65228a72c85d284b37e65548864df3be96885162659166433444406fb5ec9a09662d26cbd4e3fdd7c335669103cac525a2cbee247812e1c2dc6fc7585e89fd131afe914b4bde7ac371de6efb34cc317277d9b96bc1c07a9e92d28ce619a7d5a61773b4910d27304aba9e0f2fd872601e871a4549e0d0a932ac2", 0xd3, 0x5}, {&(0x7f0000000140)="b4ca246580bf4e3616d86c060332d22d928974c7ddf90243fa8b777dd047", 0x1e, 0x1f}, {&(0x7f00000004c0)="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", 0xff, 0x7}], 0x19820, &(0x7f0000000640)={[{@noattr2}, {@sunit={'sunit', 0x3d, 0x4}}, {@prjquota}, {@pqnoenforce}, {@nogrpid}, {@pquota}, {@noikeep}], [{@fsname={'fsname', 0x3d, '[[.9\\['}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_gt={'uid>', 0xee01}}, {@dont_hash}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000600)={{}, r4, 0x10, @unused=[0x1, 0x1ff, 0x10001, 0x2], @subvolid=0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"5e3acfc1578958c17eca5ebb7bb45d67", r4, 0x0, {0x200}, {0x0, 0x7}, 0x0, [0x6, 0x995, 0x80000001, 0x7, 0xfffffffffffffffc, 0x0, 0x5, 0x81, 0x80000001, 0x5, 0x1, 0x0, 0x32, 0x3, 0xffff, 0x1]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000780)={0x0, 0x10000, 0x3ff, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000b80)={{r3}, r4, 0x0, @inherit={0x78, &(0x7f0000000700)={0x0, 0x6, 0x8, 0x80000001, {0x24, 0x100, 0x20, 0x800, 0x4}, [0x8, 0x0, 0x1, 0x400, 0x9, 0x4]}}, @devid=r5}) r6 = openat2(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x250080, 0x84, 0x10}, 0x18) ioctl$VIDIOC_QUERY_DV_TIMINGS(r6, 0x80845663, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x3) [ 624.999162][T24719] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 625.018764][T24719] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 625.048022][T24719] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 625.072984][T24719] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 625.083237][T24719] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 625.111090][T24719] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 625.141552][T24719] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 405403320 [ 625.180668][T24719] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 625.221828][T24739] ubi0: background thread "ubi_bgt0d" started, PID 24739 [ 625.229611][T24732] ubi0: detaching mtd0 [ 625.239763][T24732] ubi0: mtd0 is detached [ 625.256874][T24719] ubi0: attaching mtd0 [ 625.261782][T24719] ubi0: scanning is finished [ 625.315297][T24610] Kernel panic - not syncing: panic_on_warn set ... [ 625.321928][T24610] CPU: 1 PID: 24610 Comm: syz-executor.5 Tainted: G B 5.16.0-rc2-next-20211125-syzkaller #0 [ 625.333352][T24610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.343419][T24610] Call Trace: [ 625.346789][T24610] [ 625.349721][T24610] dump_stack_lvl+0xcd/0x134 [ 625.354335][T24610] panic+0x2b0/0x6dd [ 625.358277][T24610] ? __warn_printk+0xf3/0xf3 [ 625.362876][T24610] ? preempt_schedule_common+0x59/0xc0 [ 625.368349][T24610] ? reiserfs_read_locked_inode+0x1e47/0x2160 [ 625.374422][T24610] ? preempt_schedule_thunk+0x16/0x18 [ 625.379858][T24610] ? trace_hardirqs_on+0x38/0x1c0 [ 625.381886][T24719] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 625.384951][T24610] ? trace_hardirqs_on+0x51/0x1c0 [ 625.384977][T24610] ? reiserfs_read_locked_inode+0x1e47/0x2160 [ 625.385003][T24610] ? reiserfs_read_locked_inode+0x1e47/0x2160 [ 625.410154][T24610] end_report.cold+0x63/0x6f [ 625.414772][T24610] kasan_report.cold+0x71/0xdf [ 625.419557][T24610] ? reiserfs_read_locked_inode+0x1e47/0x2160 [ 625.425685][T24610] reiserfs_read_locked_inode+0x1e47/0x2160 [ 625.431596][T24610] ? do_raw_spin_lock+0x120/0x2b0 [ 625.436641][T24610] ? sd_attrs_to_i_attrs+0x260/0x260 [ 625.441940][T24610] ? find_inode_nowait+0x1a0/0x1c0 [ 625.447075][T24610] ? mutex_lock_io_nested+0x1150/0x1150 [ 625.452643][T24610] ? do_raw_spin_unlock+0x171/0x230 [ 625.457956][T24610] ? iget5_locked+0x1c4/0x2e0 [ 625.462663][T24610] reiserfs_fill_super+0x1350/0x2f80 [ 625.467971][T24610] ? reiserfs_remount+0x1530/0x1530 [ 625.473184][T24610] ? sget+0x472/0x580 [ 625.477192][T24610] ? snprintf+0xbb/0xf0 [ 625.481361][T24610] ? vsprintf+0x30/0x30 [ 625.485529][T24610] ? wait_for_completion_io+0x270/0x270 [ 625.491095][T24610] ? up_write+0x148/0x470 [ 625.495438][T24610] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 625.501696][T24610] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 625.507423][T24610] ? set_blocksize+0x2e5/0x370 [ 625.512194][T24610] mount_bdev+0x34d/0x410 [ 625.516531][T24610] ? reiserfs_remount+0x1530/0x1530 [ 625.521741][T24610] ? reiserfs_kill_sb+0x1e0/0x1e0 [ 625.526778][T24610] legacy_get_tree+0x105/0x220 [ 625.531563][T24610] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 625.537841][T24610] vfs_get_tree+0x89/0x2f0 [ 625.542283][T24610] path_mount+0x1320/0x1fa0 [ 625.546808][T24610] ? kmem_cache_free+0xba/0x4a0 [ 625.551682][T24610] ? finish_automount+0xaf0/0xaf0 [ 625.556729][T24610] ? putname+0xfe/0x140 [ 625.560906][T24610] __x64_sys_mount+0x27f/0x300 [ 625.565694][T24610] ? copy_mnt_ns+0xae0/0xae0 [ 625.570307][T24610] ? syscall_enter_from_user_mode+0x21/0x70 [ 625.576228][T24610] do_syscall_64+0x35/0xb0 [ 625.580668][T24610] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 625.586584][T24610] RIP: 0033:0x7f5e666f401a [ 625.591009][T24610] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 625.610629][T24610] RSP: 002b:00007f5e65667fa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 625.619050][T24610] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f5e666f401a [ 625.627029][T24610] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f5e65668000 [ 625.635035][T24610] RBP: 00007f5e65668040 R08: 00007f5e65668040 R09: 0000000020000000 [ 625.643015][T24610] R10: 0000000000200000 R11: 0000000000000206 R12: 0000000020000000 [ 625.650997][T24610] R13: 0000000020000100 R14: 00007f5e65668000 R15: 0000000020011400 [ 625.659077][T24610] [ 625.662169][T24610] Kernel Offset: disabled [ 625.666498][T24610] Rebooting in 86400 seconds..